819 matches found
CVE-2019-16168
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner."...
CVE-2019-16168: Divide By Zero
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner."...
MGASA-2019-0240 Updated sqlite3 packages fix security vulnerabilities
Updated sqlite3 packages fix security vulnerabilities: It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive information CVE-2019-8457. It was discovered that SQLite incorrectly handled certain queries. An attacker could...
openSUSE Security Update : sqlite3 (openSUSE-2019-1645)
This update for sqlite3 fixes the following issues : Security issue fixed: - CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode when handling invalid rtree tables bsc1136976. This update was imported from the SUSE:SLE-12-SP1:Update update project. %NASLMINLEVEL 70300 C Tenable Network...
openSUSE: Security Advisory for sqlite3 (openSUSE-SU-2019:1645-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for sqlite3 (important)
openSUSE Security Update: Security update for sqlite3 Announcement ID: openSUSE-SU-2019:1645-1 Rating: important References: 1136976 Cross-References: CVE-2019-8457 Affected Products: openSUSE Leap 42.3 An update that fixes one vulnerability is now available. Description: This update for sqlite3...
SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2019:1601-1)
This update for sqlite3 fixes the following issues : Security issue fixed : CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode when handling invalid rtree tables bsc1136976. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...
SUSE-SU-2019:1601-1 Security update for sqlite3
This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode when handling invalid rtree tables bsc1136976...
Ubuntu: Security Advisory (USN-4019-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4019-2 sqlite3 vulnerabilities
USN-4019-1 fixed several vulnerabilities in sqlite3. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM. Original advisory details: It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this issue to execute arbitrary cod...
USN-4019-1: SQLite vulnerabilities
It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS. CVE-2017-2518, CVE-2017-2520 It was discovered that SQLite incorrectly handled certain...
SUSE SLES12 Security Update : sqlite3 (SUSE-SU-2019:1522-1)
This update for sqlite3 fixes the following issues : Security issue fixed : CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode when handling invalid rtree tables bsc1136976. CVE-2018-8740: Fixed a NULL pointer dereference related to corrupted databases schemas bsc1085790. CVE-2017-10989:...
SUSE-SU-2019:1522-1 Security update for sqlite3
This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode when handling invalid rtree tables bsc1136976. - CVE-2018-8740: Fixed a NULL pointer dereference related to corrupted databases schemas bsc1085790. -...
SUSE SLES11 Security Update : sqlite3 (SUSE-SU-2019:14083-1)
This update for sqlite3 fixes the following issue : Security issue fixed : CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode when handling invalid rtree tables bsc1136976. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...
SUSE-SU-2019:14083-1 Security update for sqlite3
This update for sqlite3 fixes the following issue: Security issue fixed: - CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode when handling invalid rtree tables bsc1136976...
CVE-2019-5018
An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this...
CVE-2019-8457
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode function when handling invalid rtree tables...
Out Of Bound Reads (OOB)
lSQLite3 is vulnerable to out of boundOOB reads. The component rtree Table Handler in the function rtreenode does not properly handle invalid rtree tables, leading to OOB if the input is malicious...
