CVE-2020-13434

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c (CVE-2020-13434). Affected versions are up to 3.32.0; remediation is to update to SQLite 3.32.3. This fix is reflected in multiple advisories (e.g., Apple iOS/macOS security content HT211850/HT211935 noting SQLite u...

CVE-2020-13434

SQLite through 3.32.0 has an integer overflow in sqlite3strvappendf in printf.c...

CVE-2020-13434

SQLite through 3.32.0 has an integer overflow in sqlite3strvappendf in printf.c...

CVE-2020-13435

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c...

CVE-2020-13435

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c...

CVE-2020-13435

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c...

CVE-2020-13435

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c...

CVE-2020-13435

CVE-2020-13435 affects SQLite up to version 3.32.0, causing a segmentation fault in sqlite3ExprCodeTarget (expr.c). The issue is described in the original entry as a segmentation fault; multiple connected sources confirm SQLite-related fixes in later advisories (e.g., updates to 3.32.3). Impact i...

CVE-2020-13434: Integer Overflow or Wraparound

SQLite through 3.32.0 has an integer overflow in sqlite3strvappendf in printf.c...

CVE-2020-13435: NULL Pointer Dereference

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c...

PT-2020-6895

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.32.0 Description The issue is related to an integer overflow in the sqlite3 str vappendf function in printf.c, which can be exploited to cause a denial of service. Recommendations For versions prior to 3.32.0, update...

PT-2020-6897

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.32.0 Description The issue is related to a null pointer dereference in the sqlite3ExprCodeTarget function of the SQLite database management system. This can be exploited to cause a denial of service. A remote attacke...

KLA11791 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A logic vulnerability in...

About the security content of iTunes 12.10.7 for Windows

About the security content of iTunes 12.10.7 for Windows This document describes the security content of iTunes 12.10.7 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

Security Bulletin: A security vulnerability has been identified in SQLite shipped with IBM Watson Machine Learning Community Edition (WMLCE)

Summary Multiple vulnerabilities have been found in the SQLite package, which is either built in to or distributed with IBM WMLCE. Vulnerability Details CVEID: CVE-2020-11656 DESCRIPTION: SQLite could allow a remote attacker to obtain sensitive information, caused by a use-after-free in the ALTER...

Security Bulletin: A security vulnerability has been identified in the sqlite package shipped with IBM Watson Machine Learning Community Edition (WMLCE)

Summary Multiple vulnerabilities were found in the sqlite package, which is either built in to or distributed with IBM WMLCE. The following CVEs have been resolved as part of this security update. Vulnerability Details CVEID: CVE-2019-19925 DESCRIPTION: SQLite is vulnerable to a denial of service...

Synology SRM SafeAccess 1.2.1-0220 code execution Vvulnerability

Summary An exploitable code execution vulnerability exists in the SafeAccess 1.2.1-0220 package of Synology SRM 1.2.3 RT2600ac 8017-5. A specially crafted domain access request can lead to an SQL injection. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Synolo...

PT-2020-6896

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.32.0 Description The issue is related to a use-after-free in the fts3EvalNextRow function of the ext/fts3/fts3.c component in SQLite, which can lead to memory corruption and potentially allow an attacker to execute...

SQLite ALTER TABLE Data Compromise

The vulnerability of the SQLite database management system’s ALTER TABLE command lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2020-3859

Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.32.0 Description: The issue is related to a null pointer dereference in the ext/fts3/fts3 snippet.c component of the SQLite database management system. This can be exploited via a crafted matchinfo query, potentiall...