SQLite: Multiple vulnerabilities

Background SQLite is a C library that implements an SQL database engine. Description Multiple vulnerabilities have been discovered in SQLite. Please review the CVE identifiers referenced below for details. Impact A remote attacker could possibly execute arbitrary code with the privileges of the...

Oracle Linux 7 : sqlite (ELSA-2020-0227)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0227 advisory. 3.7.17-8.1 - Fixes for CVE-2019-13734 1786505 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Important: Red Hat Security Advisory: sqlite security update

An update for sqlite is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Microsoft JET Database Engine Heap-based Buffer Overflow (CVE-2018-8392)

A heap-based buffer overflow vulnerability exists in the Microsoft Jet Database Engine Jet. The vulnerability is due to improper handling of objects in memory. A remote, unauthenticated attacker can exploit the vulnerability by enticing a user to open a specially crafted Excel file...

The vulnerability of the Windows Jet Database Engine component allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component in the operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

[SECURITY] Fedora 30 Update: sqlite-3.26.0-7.fc30

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

The vulnerability of the Windows Jet Database Engine component allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Jet Database Engine component in the operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted file...

USN-4205-1: SQLite vulnerabilities

It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM. CVE-2018-8740 It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use thi...

Microsoft Windows Multiple Vulnerabilities (KB4525232)

This host is missing a critical security update according to Microsoft KB4525232 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4525237)

This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

CVE-2019-1406

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'...

Remote code execution

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'...

CVE-2019-1406

CVE-2019-1406 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue could allow an attacker to execute arbitrary code on affected systems. Public references in the provided documents identify the Jet Database...

CVE-2019-1406

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'...

October 8, 2019—KB4519990 (Security-only update)

None None...

Jet Database Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to...

November 12, 2019—KB4525239 (Security-only update)

None None...

October 8, 2019—KB4520007 (Monthly Rollup)

None None...

September 10, 2019—KB4516033 (Security-only update)

None None...

CVE-2019-1406: Undefined Security Weakness

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'...