Red Hat Security Advisory: sqlite security update
🔗 CVE IDs covered (8)
📋 Description
CVE-2019-5018 — sqlite: Use-after-free in window function leading to remote code execution CVE-2019-16168 — sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c CVE-2019-20218 — sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error CVE-2020-6405 — sqlite: Out-of-bounds read in SELECT with ON/USING clause CVE-2020-9327 — sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations CVE-2020-13630 — sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c CVE-2020-13631 — sqlite: Virtual table can be renamed into the name of one of its shadow tables CVE-2020-13632 — sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query
🔗 References (12)
- selfhttps://access.redhat.com/errata/RHSA-2020:4442
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1708301
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1768986
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1791313
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1801181
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1809315
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1841562
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1841568
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1841574
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4442.json