RHSA-2020:4442MediumCVSS 8.1

Red Hat Security Advisory: sqlite security update

Published
November 4, 2020
Last Modified
June 26, 2026

🔗 CVE IDs covered (8)

📋 Description

CVE-2019-5018 — sqlite: Use-after-free in window function leading to remote code execution CVE-2019-16168 — sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c CVE-2019-20218 — sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error CVE-2020-6405 — sqlite: Out-of-bounds read in SELECT with ON/USING clause CVE-2020-9327 — sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations CVE-2020-13630 — sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c CVE-2020-13631 — sqlite: Virtual table can be renamed into the name of one of its shadow tables CVE-2020-13632 — sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query

🔗 References (12)