RHEL 8 : sqlite (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - sqlite: heap-based buffer over-read in function fts5HashEntrySort in sqlite3.c CVE-2019-9936 -...

ASB-A-192605364

In sqlite3Select of select.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the sqlite3Select function in the SQLite database management system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the sqlite3Select function in the SQLite database management system is related to a selection error that uses the DISTINCT operator. Exploiting this vulnerability can allow an attacker to cause a service failure...