Lucene search
K

35 matches found

NVD
NVD
added 2020/06/06 4:15 p.m.21 views

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS7.6AI score0.04447EPSS
Exploits1References10
Prion
Prion
added 2020/06/06 4:15 p.m.23 views

Design/Logic Flaw

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

5CVSS7.4AI score0.04447EPSS
Exploits1References10Affected Software10
UbuntuCve
UbuntuCve
added 2020/06/06 4:15 p.m.29 views

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS6.9AI score0.04447EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2020/06/06 3:37 p.m.43 views

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5CVSS7.6AI score0.04447EPSS
Exploits1
CVE
CVE
added 2020/06/06 3:37 p.m.347 views

CVE-2020-13871

SQLite 3.32.2 is affected by a use-after-free in resetAccumulator (select.c) due to a late parse tree rewrite for window functions. Impact could include a crash or arbitrary code execution. Remediation: upgrade to SQLite 3.32.3 or later (fix upstream).

7.5CVSS7.4AI score0.04447EPSS
Exploits1References10Affected Software1
Cvelist
Cvelist
added 2020/06/06 3:37 p.m.50 views

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late...

7.5AI score0.04447EPSS
Exploits1References10
RedHat Linux
RedHat Linux
added 2020/02/17 9:31 a.m.4 views

sqlite: invalid pointer dereference in exprListAppendList in window.c

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled...

7.5CVSS7.4AI score0.06937EPSS
Exploits0References4
OSV
OSV
added 2019/11/25 8:15 p.m.26 views

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

7.5CVSS6.6AI score
Exploits0References4
OSV
OSV
added 2019/11/25 8:15 p.m.2 views

ALPINE-CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

7.5CVSS7AI score0.03333EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2019/11/25 8:15 p.m.30 views

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

7.5CVSS7.1AI score0.03333EPSS
Exploits0References2
Prion
Prion
added 2019/11/25 8:15 p.m.29 views

Sql injection

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

5CVSS7.3AI score0.03333EPSS
Exploits0References4Affected Software4
AlpineLinux
AlpineLinux
added 2019/11/25 7:32 p.m.34 views

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

7.5CVSS8.6AI score0.03333EPSS
Exploits0
CVE
CVE
added 2019/11/25 7:32 p.m.231 views

CVE-2019-19244

CVE-2019-19244 affects SQLite 3.30.1, where sqlite3Select in select.c can crash if a sub‑select uses both DISTINCT and window functions and there is particular ORDER BY usage. The consequence is a denial of service via crash. Connected IBM/ASTRA pages confirm the CVE and describe the same SQLite ...

7.5CVSS7.6AI score0.03333EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2019/11/25 7:32 p.m.26 views

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage...

8.4AI score0.03333EPSS
Exploits0References4
OSV
OSV
added 2019/05/10 7:29 p.m.1 views

DEBIAN-CVE-2019-5018

An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this...

8.1CVSS9.9AI score0.06683EPSS
Exploits1References1
Rows per page
Query Builder