Design/Logic Flaw

An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this...

CVE-2019-5018

CVE-2019-5018 is a SQLite vulnerability in the window function code (SQLite 3.26.0) that allows a specially crafted SQL to trigger a use-after-free, potentially enabling remote code execution. The issue is documented across multiple advisories (Debian, Alpine, Gentoo, Cloud Foundry, IBM Watson St...

CVE-2019-5018

An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this...

CVE-2019-5018

An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this...

CVE-2019-5018

An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this...

SUSE-SU-2019:1208-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2018-8740: Fixed a NULL pointer dereference related to corrupted databases schemas bsc1085790. - CVE-2017-10989: Fixed a heap-based buffer over-read in getNodeSize bsc1132045...

OPENSUSE-SU-2019:1372-1 Security update for sqlite3

This update for sqlite3 to version 3.28.0 fixes the following issues: Security issues fixed: - CVE-2019-9936: Fixed a heap-based buffer over-read, when running fts5 prefix queries inside transaction bsc1130326. - CVE-2019-9937: Fixed a denial of service related to interleaving reads and writes in...

Security update for sqlite3 (moderate)

openSUSE Security Update: Security update for sqlite3 Announcement ID: openSUSE-SU-2019:1372-1 Rating: moderate References: 1130325 1130326 Cross-References: CVE-2019-9936 CVE-2019-9937 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

Sqlite3 Window Function Remote Code Execution Vulnerability

Summary An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this...

sqlite3 -- use after free

MITRE reports: An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigg...

SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2019:1127-1)

This update for sqlite3 to version 3.28.0 fixes the following issues : Security issues fixed : CVE-2019-9936: Fixed a heap-based buffer over-read, when running fts5 prefix queries inside transaction bsc1130326. CVE-2019-9937: Fixed a denial of service related to interleaving reads and writes in a...

SUSE-SU-2019:1127-1 Security update for sqlite3

This update for sqlite3 to version 3.28.0 fixes the following issues: Security issues fixed: - CVE-2019-9936: Fixed a heap-based buffer over-read, when running fts5 prefix queries inside transaction bsc1130326. - CVE-2019-9937: Fixed a denial of service related to interleaving reads and writes in...

Fedora 30 : php (2019-1d78e14cfd)

PHP version 7.3.4 04 April 2019 Core: - Fixed bug php77738 Nullptr deref in zendcompileexpr. Laruence - Fixed bug php77660 Segmentation fault on break 2147483648. Laruence - Fixed bug php77652 Anonymous classes can lose their interface information. Nikita - Fixed bug php77345 Stack Overflow cause...

openSUSE: Security Advisory for sqlite3 (openSUSE-SU-2019:1222-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLES12 Security Update : sqlite3 (SUSE-SU-2019:0973-1)

This update for sqlite3 fixes the following issues : Security issues fixed : CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled bsc1131576. CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. CVE-2016-6153: Fixed incorrect permissions whe...

openSUSE Security Update : sqlite3 (openSUSE-2019-1222)

This update for sqlite3 fixes the following issues : Security issues fixed : - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. - CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled bsc1131576. This update was imported from the...

SUSE-SU-2019:0973-1 Security update for sqlite3

This update for sqlite3 fixes the following issues: Security issues fixed: - CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled bsc1131576. - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. - CVE-2016-6153: Fixed incorrect permissions...

Security update for sqlite3 (moderate)

openSUSE Security Update: Security update for sqlite3 Announcement ID: openSUSE-SU-2019:1222-1 Rating: moderate References: 1119687 1131576 Cross-References: CVE-2018-20346 CVE-2018-20506 Affected Products: openSUSE Leap 42.3 An update that fixes two vulnerabilities is now available. Description:...

Fedora 29 : php (2019-da36d5d484)

PHP version 7.2.17 04 Apr 2019 Core: - Fixed bug php77738 Nullptr deref in zendcompileexpr. Laruence - Fixed bug php77660 Segmentation fault on break 2147483648. Laruence - Fixed bug php77652 Anonymous classes can lose their interface information. Nikita - Fixed bug php77676 Unable to run tests...

SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2019:0913-1)

This update for sqlite3 fixes the following issues : Security issues fixed : CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 Magellan bsc1119687. CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled bsc1131576. Note that Tenable Network Security has extract...