csaf_opensuse - opensuse-su-2021:1058-1

Vulnerability from csaf_opensuse

Published

2021-07-19 21:03

Modified

2021-07-19 21:03

Summary

Security update for sqlite3

Notes

Title of the patch

Security update for sqlite3

Description of the patch

This update for sqlite3 fixes the following issues: - Update to version 3.36.0 - CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener optimization (bsc#1173641) - CVE-2020-9327: NULL pointer dereference and segmentation fault because of generated column optimizations in isAuxiliaryVtabOperator (bsc#1164719) - CVE-2019-20218: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error (bsc#1160439) - CVE-2019-19959: memory-management error via ext/misc/zipfile.c involving embedded '\0' input (bsc#1160438) - CVE-2019-19923: improper handling of certain uses of SELECT DISTINCT in flattenSubquery may lead to null pointer dereference (bsc#1160309) - CVE-2019-19924: improper error handling in sqlite3WindowRewrite() (bsc#1159850) - CVE-2019-19925: improper handling of NULL pathname during an update of a ZIP archive (bsc#1159847) - CVE-2019-19926: improper handling of certain errors during parsing multiSelect in select.c (bsc#1159715) - CVE-2019-19880: exprListAppendList in window.c allows attackers to trigger an invalid pointer dereference (bsc#1159491) - CVE-2019-19603: during handling of CREATE TABLE and CREATE VIEW statements, does not consider confusion with a shadow table name (bsc#1158960) - CVE-2019-19646: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns (bsc#1158959) - CVE-2019-19645: alter.c allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements (bsc#1158958) - CVE-2019-19317: lookupName in resolve.c omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service (bsc#1158812) - CVE-2019-19244: sqlite3,sqlite2,sqlite: The function sqlite3Select in select.c allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage (bsc#1157818) - CVE-2015-3415: sqlite3VdbeExec comparison operator vulnerability (bsc#928701) - CVE-2015-3414: sqlite3,sqlite2: dequoting of collation-sequence names (bsc#928700) - CVE-2020-13434: integer overflow in sqlite3_str_vappendf (bsc#1172115) - CVE-2020-13630: (bsc#1172234: use-after-free in fts3EvalNextRow - CVE-2020-13631: virtual table allowed to be renamed to one of its shadow tables (bsc#1172236) - CVE-2020-13632: NULL pointer dereference via crafted matchinfo() query (bsc#1172240) - CVE-2020-13435: Malicious SQL statements could have crashed the process that is running SQLite (bsc#1172091) This update was imported from the SUSE:SLE-15:Update update project.

Patchnames

openSUSE-2021-1058

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for sqlite3",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for sqlite3 fixes the following issues:\n\n- Update to version 3.36.0\n- CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener\n  optimization (bsc#1173641)\n- CVE-2020-9327: NULL pointer dereference and segmentation fault because of generated column optimizations in\n  isAuxiliaryVtabOperator (bsc#1164719)\n- CVE-2019-20218: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error (bsc#1160439)\n- CVE-2019-19959: memory-management error via ext/misc/zipfile.c involving embedded '\\0' input (bsc#1160438)\n- CVE-2019-19923: improper handling  of  certain uses of SELECT DISTINCT in flattenSubquery may lead to null pointer\n  dereference (bsc#1160309)\n- CVE-2019-19924: improper error handling in sqlite3WindowRewrite() (bsc#1159850)\n- CVE-2019-19925: improper handling of NULL pathname during an update of a ZIP archive (bsc#1159847)\n- CVE-2019-19926: improper handling  of certain errors during parsing  multiSelect in select.c (bsc#1159715)\n- CVE-2019-19880: exprListAppendList in window.c allows attackers to trigger an invalid pointer dereference\n  (bsc#1159491)\n- CVE-2019-19603: during handling of CREATE TABLE and CREATE VIEW statements, does not consider confusion with\n  a shadow table name (bsc#1158960)\n- CVE-2019-19646: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated\n  columns (bsc#1158959)\n- CVE-2019-19645: alter.c allows attackers to trigger infinite recursion via certain types of self-referential views\n  in conjunction with ALTER TABLE statements (bsc#1158958)\n- CVE-2019-19317: lookupName in resolve.c omits bits from the colUsed bitmask in the case of a generated column,\n  which allows attackers to cause a denial of service (bsc#1158812)\n- CVE-2019-19244: sqlite3,sqlite2,sqlite: The function sqlite3Select in select.c allows a crash if a\n  sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage (bsc#1157818)\n- CVE-2015-3415: sqlite3VdbeExec comparison operator vulnerability (bsc#928701)\n- CVE-2015-3414: sqlite3,sqlite2: dequoting of collation-sequence names (bsc#928700)\n- CVE-2020-13434: integer overflow in sqlite3_str_vappendf (bsc#1172115)\n- CVE-2020-13630: (bsc#1172234: use-after-free in fts3EvalNextRow\n- CVE-2020-13631: virtual table allowed to be renamed to one of its shadow tables (bsc#1172236)\n- CVE-2020-13632: NULL pointer dereference via crafted matchinfo() query (bsc#1172240)\n- CVE-2020-13435: Malicious SQL statements could have crashed the process that is running SQLite (bsc#1172091)\n\nThis update was imported from the SUSE:SLE-15:Update update project.",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "openSUSE-2021-1058",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1058-1.json",
         },
         {
            category: "self",
            summary: "URL for openSUSE-SU-2021:1058-1",
            url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/",
         },
         {
            category: "self",
            summary: "E-Mail link for openSUSE-SU-2021:1058-1",
            url: "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SB6Z44NRR3L5O3VXGRWAB7XUKDS4TMFZ/",
         },
         {
            category: "self",
            summary: "SUSE Bug 1157818",
            url: "https://bugzilla.suse.com/1157818",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158812",
            url: "https://bugzilla.suse.com/1158812",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158958",
            url: "https://bugzilla.suse.com/1158958",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158959",
            url: "https://bugzilla.suse.com/1158959",
         },
         {
            category: "self",
            summary: "SUSE Bug 1158960",
            url: "https://bugzilla.suse.com/1158960",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159491",
            url: "https://bugzilla.suse.com/1159491",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159715",
            url: "https://bugzilla.suse.com/1159715",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159847",
            url: "https://bugzilla.suse.com/1159847",
         },
         {
            category: "self",
            summary: "SUSE Bug 1159850",
            url: "https://bugzilla.suse.com/1159850",
         },
         {
            category: "self",
            summary: "SUSE Bug 1160309",
            url: "https://bugzilla.suse.com/1160309",
         },
         {
            category: "self",
            summary: "SUSE Bug 1160438",
            url: "https://bugzilla.suse.com/1160438",
         },
         {
            category: "self",
            summary: "SUSE Bug 1160439",
            url: "https://bugzilla.suse.com/1160439",
         },
         {
            category: "self",
            summary: "SUSE Bug 1164719",
            url: "https://bugzilla.suse.com/1164719",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172091",
            url: "https://bugzilla.suse.com/1172091",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172115",
            url: "https://bugzilla.suse.com/1172115",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172234",
            url: "https://bugzilla.suse.com/1172234",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172236",
            url: "https://bugzilla.suse.com/1172236",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172240",
            url: "https://bugzilla.suse.com/1172240",
         },
         {
            category: "self",
            summary: "SUSE Bug 1173641",
            url: "https://bugzilla.suse.com/1173641",
         },
         {
            category: "self",
            summary: "SUSE Bug 928700",
            url: "https://bugzilla.suse.com/928700",
         },
         {
            category: "self",
            summary: "SUSE Bug 928701",
            url: "https://bugzilla.suse.com/928701",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-3414 page",
            url: "https://www.suse.com/security/cve/CVE-2015-3414/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2015-3415 page",
            url: "https://www.suse.com/security/cve/CVE-2015-3415/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19244 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19244/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19317 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19317/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19603 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19603/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19645 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19645/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19646 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19646/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19880 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19880/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19923 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19923/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19924 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19924/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19925 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19925/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19926 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19926/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-19959 page",
            url: "https://www.suse.com/security/cve/CVE-2019-19959/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-20218 page",
            url: "https://www.suse.com/security/cve/CVE-2019-20218/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13434 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13434/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13435 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13435/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13630 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13630/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13631 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13631/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13632 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13632/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-15358 page",
            url: "https://www.suse.com/security/cve/CVE-2020-15358/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-9327 page",
            url: "https://www.suse.com/security/cve/CVE-2020-9327/",
         },
      ],
      title: "Security update for sqlite3",
      tracking: {
         current_release_date: "2021-07-19T21:03:43Z",
         generator: {
            date: "2021-07-19T21:03:43Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "openSUSE-SU-2021:1058-1",
         initial_release_date: "2021-07-19T21:03:43Z",
         revision_history: [
            {
               date: "2021-07-19T21:03:43Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                        product: {
                           name: "libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                           product_id: "libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "sqlite3-3.36.0-lp152.4.3.1.i586",
                        product: {
                           name: "sqlite3-3.36.0-lp152.4.3.1.i586",
                           product_id: "sqlite3-3.36.0-lp152.4.3.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                        product: {
                           name: "sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                           product_id: "sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
                        product: {
                           name: "sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
                           product_id: "sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                        product: {
                           name: "libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                           product_id: "libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                        product: {
                           name: "libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                           product_id: "libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "sqlite3-3.36.0-lp152.4.3.1.x86_64",
                        product: {
                           name: "sqlite3-3.36.0-lp152.4.3.1.x86_64",
                           product_id: "sqlite3-3.36.0-lp152.4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                        product: {
                           name: "sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                           product_id: "sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.2",
                        product: {
                           name: "openSUSE Leap 15.2",
                           product_id: "openSUSE Leap 15.2",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.2",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libsqlite3-0-3.36.0-lp152.4.3.1.i586 as component of openSUSE Leap 15.2",
               product_id: "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
            },
            product_reference: "libsqlite3-0-3.36.0-lp152.4.3.1.i586",
            relates_to_product_reference: "openSUSE Leap 15.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libsqlite3-0-3.36.0-lp152.4.3.1.x86_64 as component of openSUSE Leap 15.2",
               product_id: "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
            },
            product_reference: "libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64 as component of openSUSE Leap 15.2",
               product_id: "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
            },
            product_reference: "libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "sqlite3-3.36.0-lp152.4.3.1.i586 as component of openSUSE Leap 15.2",
               product_id: "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
            },
            product_reference: "sqlite3-3.36.0-lp152.4.3.1.i586",
            relates_to_product_reference: "openSUSE Leap 15.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "sqlite3-3.36.0-lp152.4.3.1.x86_64 as component of openSUSE Leap 15.2",
               product_id: "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
            },
            product_reference: "sqlite3-3.36.0-lp152.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "sqlite3-devel-3.36.0-lp152.4.3.1.i586 as component of openSUSE Leap 15.2",
               product_id: "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
            },
            product_reference: "sqlite3-devel-3.36.0-lp152.4.3.1.i586",
            relates_to_product_reference: "openSUSE Leap 15.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "sqlite3-devel-3.36.0-lp152.4.3.1.x86_64 as component of openSUSE Leap 15.2",
               product_id: "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
            },
            product_reference: "sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "sqlite3-doc-3.36.0-lp152.4.3.1.noarch as component of openSUSE Leap 15.2",
               product_id: "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            },
            product_reference: "sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            relates_to_product_reference: "openSUSE Leap 15.2",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2015-3414",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-3414",
            },
         ],
         notes: [
            {
               category: "general",
               text: "SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE\"\"\"\"\"\"\"\" at the end of a SELECT statement.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-3414",
               url: "https://www.suse.com/security/cve/CVE-2015-3414",
            },
            {
               category: "external",
               summary: "SUSE Bug 1085790 for CVE-2015-3414",
               url: "https://bugzilla.suse.com/1085790",
            },
            {
               category: "external",
               summary: "SUSE Bug 1190372 for CVE-2015-3414",
               url: "https://bugzilla.suse.com/1190372",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193078 for CVE-2015-3414",
               url: "https://bugzilla.suse.com/1193078",
            },
            {
               category: "external",
               summary: "SUSE Bug 928700 for CVE-2015-3414",
               url: "https://bugzilla.suse.com/928700",
            },
            {
               category: "external",
               summary: "SUSE Bug 928701 for CVE-2015-3414",
               url: "https://bugzilla.suse.com/928701",
            },
            {
               category: "external",
               summary: "SUSE Bug 928702 for CVE-2015-3414",
               url: "https://bugzilla.suse.com/928702",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-3414",
      },
      {
         cve: "CVE-2015-3415",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2015-3415",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2015-3415",
               url: "https://www.suse.com/security/cve/CVE-2015-3415",
            },
            {
               category: "external",
               summary: "SUSE Bug 1190372 for CVE-2015-3415",
               url: "https://bugzilla.suse.com/1190372",
            },
            {
               category: "external",
               summary: "SUSE Bug 928700 for CVE-2015-3415",
               url: "https://bugzilla.suse.com/928700",
            },
            {
               category: "external",
               summary: "SUSE Bug 928701 for CVE-2015-3415",
               url: "https://bugzilla.suse.com/928701",
            },
            {
               category: "external",
               summary: "SUSE Bug 928702 for CVE-2015-3415",
               url: "https://bugzilla.suse.com/928702",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.7,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2015-3415",
      },
      {
         cve: "CVE-2019-19244",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19244",
            },
         ],
         notes: [
            {
               category: "general",
               text: "sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19244",
               url: "https://www.suse.com/security/cve/CVE-2019-19244",
            },
            {
               category: "external",
               summary: "SUSE Bug 1157817 for CVE-2019-19244",
               url: "https://bugzilla.suse.com/1157817",
            },
            {
               category: "external",
               summary: "SUSE Bug 1157818 for CVE-2019-19244",
               url: "https://bugzilla.suse.com/1157818",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-19244",
      },
      {
         cve: "CVE-2019-19317",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19317",
            },
         ],
         notes: [
            {
               category: "general",
               text: "lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19317",
               url: "https://www.suse.com/security/cve/CVE-2019-19317",
            },
            {
               category: "external",
               summary: "SUSE Bug 1158812 for CVE-2019-19317",
               url: "https://bugzilla.suse.com/1158812",
            },
            {
               category: "external",
               summary: "SUSE Bug 1196773 for CVE-2019-19317",
               url: "https://bugzilla.suse.com/1196773",
            },
            {
               category: "external",
               summary: "SUSE Bug 1196775 for CVE-2019-19317",
               url: "https://bugzilla.suse.com/1196775",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "low",
            },
         ],
         title: "CVE-2019-19317",
      },
      {
         cve: "CVE-2019-19603",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19603",
            },
         ],
         notes: [
            {
               category: "general",
               text: "SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19603",
               url: "https://www.suse.com/security/cve/CVE-2019-19603",
            },
            {
               category: "external",
               summary: "SUSE Bug 1158960 for CVE-2019-19603",
               url: "https://bugzilla.suse.com/1158960",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193078 for CVE-2019-19603",
               url: "https://bugzilla.suse.com/1193078",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "important",
            },
         ],
         title: "CVE-2019-19603",
      },
      {
         cve: "CVE-2019-19645",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19645",
            },
         ],
         notes: [
            {
               category: "general",
               text: "alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19645",
               url: "https://www.suse.com/security/cve/CVE-2019-19645",
            },
            {
               category: "external",
               summary: "SUSE Bug 1158958 for CVE-2019-19645",
               url: "https://bugzilla.suse.com/1158958",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.1,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-19645",
      },
      {
         cve: "CVE-2019-19646",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19646",
            },
         ],
         notes: [
            {
               category: "general",
               text: "pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19646",
               url: "https://www.suse.com/security/cve/CVE-2019-19646",
            },
            {
               category: "external",
               summary: "SUSE Bug 1158959 for CVE-2019-19646",
               url: "https://bugzilla.suse.com/1158959",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-19646",
      },
      {
         cve: "CVE-2019-19880",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19880",
            },
         ],
         notes: [
            {
               category: "general",
               text: "exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19880",
               url: "https://www.suse.com/security/cve/CVE-2019-19880",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159491 for CVE-2019-19880",
               url: "https://bugzilla.suse.com/1159491",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159715 for CVE-2019-19880",
               url: "https://bugzilla.suse.com/1159715",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162833 for CVE-2019-19880",
               url: "https://bugzilla.suse.com/1162833",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "important",
            },
         ],
         title: "CVE-2019-19880",
      },
      {
         cve: "CVE-2019-19923",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19923",
            },
         ],
         notes: [
            {
               category: "general",
               text: "flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19923",
               url: "https://www.suse.com/security/cve/CVE-2019-19923",
            },
            {
               category: "external",
               summary: "SUSE Bug 1160309 for CVE-2019-19923",
               url: "https://bugzilla.suse.com/1160309",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162833 for CVE-2019-19923",
               url: "https://bugzilla.suse.com/1162833",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-19923",
      },
      {
         cve: "CVE-2019-19924",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19924",
            },
         ],
         notes: [
            {
               category: "general",
               text: "SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19924",
               url: "https://www.suse.com/security/cve/CVE-2019-19924",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159850 for CVE-2019-19924",
               url: "https://bugzilla.suse.com/1159850",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-19924",
      },
      {
         cve: "CVE-2019-19925",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19925",
            },
         ],
         notes: [
            {
               category: "general",
               text: "zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19925",
               url: "https://www.suse.com/security/cve/CVE-2019-19925",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159847 for CVE-2019-19925",
               url: "https://bugzilla.suse.com/1159847",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162833 for CVE-2019-19925",
               url: "https://bugzilla.suse.com/1162833",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "low",
            },
         ],
         title: "CVE-2019-19925",
      },
      {
         cve: "CVE-2019-19926",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19926",
            },
         ],
         notes: [
            {
               category: "general",
               text: "multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19926",
               url: "https://www.suse.com/security/cve/CVE-2019-19926",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159491 for CVE-2019-19926",
               url: "https://bugzilla.suse.com/1159491",
            },
            {
               category: "external",
               summary: "SUSE Bug 1159715 for CVE-2019-19926",
               url: "https://bugzilla.suse.com/1159715",
            },
            {
               category: "external",
               summary: "SUSE Bug 1162833 for CVE-2019-19926",
               url: "https://bugzilla.suse.com/1162833",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "important",
            },
         ],
         title: "CVE-2019-19926",
      },
      {
         cve: "CVE-2019-19959",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-19959",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-19959",
               url: "https://www.suse.com/security/cve/CVE-2019-19959",
            },
            {
               category: "external",
               summary: "SUSE Bug 1160438 for CVE-2019-19959",
               url: "https://bugzilla.suse.com/1160438",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-19959",
      },
      {
         cve: "CVE-2019-20218",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-20218",
            },
         ],
         notes: [
            {
               category: "general",
               text: "selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-20218",
               url: "https://www.suse.com/security/cve/CVE-2019-20218",
            },
            {
               category: "external",
               summary: "SUSE Bug 1160439 for CVE-2019-20218",
               url: "https://bugzilla.suse.com/1160439",
            },
            {
               category: "external",
               summary: "SUSE Bug 1189840 for CVE-2019-20218",
               url: "https://bugzilla.suse.com/1189840",
            },
            {
               category: "external",
               summary: "SUSE Bug 1190372 for CVE-2019-20218",
               url: "https://bugzilla.suse.com/1190372",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192495 for CVE-2019-20218",
               url: "https://bugzilla.suse.com/1192495",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193078 for CVE-2019-20218",
               url: "https://bugzilla.suse.com/1193078",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "important",
            },
         ],
         title: "CVE-2019-20218",
      },
      {
         cve: "CVE-2020-13434",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13434",
            },
         ],
         notes: [
            {
               category: "general",
               text: "SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13434",
               url: "https://www.suse.com/security/cve/CVE-2020-13434",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172115 for CVE-2020-13434",
               url: "https://bugzilla.suse.com/1172115",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-13434",
      },
      {
         cve: "CVE-2020-13435",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13435",
            },
         ],
         notes: [
            {
               category: "general",
               text: "SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13435",
               url: "https://www.suse.com/security/cve/CVE-2020-13435",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172091 for CVE-2020-13435",
               url: "https://bugzilla.suse.com/1172091",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "important",
            },
         ],
         title: "CVE-2020-13435",
      },
      {
         cve: "CVE-2020-13630",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13630",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13630",
               url: "https://www.suse.com/security/cve/CVE-2020-13630",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172234 for CVE-2020-13630",
               url: "https://bugzilla.suse.com/1172234",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-13630",
      },
      {
         cve: "CVE-2020-13631",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13631",
            },
         ],
         notes: [
            {
               category: "general",
               text: "SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13631",
               url: "https://www.suse.com/security/cve/CVE-2020-13631",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172236 for CVE-2020-13631",
               url: "https://bugzilla.suse.com/1172236",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-13631",
      },
      {
         cve: "CVE-2020-13632",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13632",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13632",
               url: "https://www.suse.com/security/cve/CVE-2020-13632",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172240 for CVE-2020-13632",
               url: "https://bugzilla.suse.com/1172240",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-13632",
      },
      {
         cve: "CVE-2020-15358",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-15358",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-15358",
               url: "https://www.suse.com/security/cve/CVE-2020-15358",
            },
            {
               category: "external",
               summary: "SUSE Bug 1173641 for CVE-2020-15358",
               url: "https://bugzilla.suse.com/1173641",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-15358",
      },
      {
         cve: "CVE-2020-9327",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-9327",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
               "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
               "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-9327",
               url: "https://www.suse.com/security/cve/CVE-2020-9327",
            },
            {
               category: "external",
               summary: "SUSE Bug 1164719 for CVE-2020-9327",
               url: "https://bugzilla.suse.com/1164719",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:libsqlite3-0-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:libsqlite3-0-32bit-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.i586",
                  "openSUSE Leap 15.2:sqlite3-devel-3.36.0-lp152.4.3.1.x86_64",
                  "openSUSE Leap 15.2:sqlite3-doc-3.36.0-lp152.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2021-07-19T21:03:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-9327",
      },
   ],
}

cve-2019-19603

Vulnerability from cvelistv5

Published

2019-12-09 18:44

Modified

2024-08-05 02:25

Severity ?

Summary

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.

References

▼	URL	Tags
	https://www.sqlite.org/	x_refsource_MISC
	https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20191223-0001/	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://usn.ubuntu.com/4394-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E	mailing-list, x_refsource_MLIST
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:25:11.223Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  name: "USN-4394-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4394-1/",
               },
               {
                  name: "[guacamole-issues] 20210618 [jira] [Created] (GUACAMOLE-1368) Latest docker image fails security scans.",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:07:13",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               name: "USN-4394-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4394-1/",
            },
            {
               name: "[guacamole-issues] 20210618 [jira] [Created] (GUACAMOLE-1368) Latest docker image fails security scans.",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19603",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.sqlite.org/",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/",
                  },
                  {
                     name: "https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20191223-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "USN-4394-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4394-1/",
                  },
                  {
                     name: "[guacamole-issues] 20210618 [jira] [Created] (GUACAMOLE-1368) Latest docker image fails security scans.",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19603",
      datePublished: "2019-12-09T18:44:06",
      dateReserved: "2019-12-05T00:00:00",
      dateUpdated: "2024-08-05T02:25:11.223Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13630

Vulnerability from cvelistv5

Published

2020-05-27 14:42

Modified

2024-08-04 12:25

Severity ?

Summary

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

References

▼	URL	Tags
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/4394-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://bugs.chromium.org/p/chromium/issues/detail?id=1080459	x_refsource_MISC
	https://sqlite.org/src/info/0d69f76f0865f962	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200608-0002/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/202007-26	vendor-advisory, x_refsource_GENTOO
	https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc	vendor-advisory, x_refsource_FREEBSD
	https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html	mailing-list, x_refsource_MLIST
	https://support.apple.com/kb/HT211843	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211850	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211844	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuoct2020.html	x_refsource_MISC
	https://support.apple.com/kb/HT211931	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211952	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2020/Nov/19	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Nov/20	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Nov/22	mailing-list, x_refsource_FULLDISC
	https://support.apple.com/kb/HT211935	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2020/Dec/32	mailing-list, x_refsource_FULLDISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:25:16.317Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2020-0477f8840e",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
               },
               {
                  name: "USN-4394-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4394-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://sqlite.org/src/info/0d69f76f0865f962",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200608-0002/",
               },
               {
                  name: "GLSA-202007-26",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-26",
               },
               {
                  name: "FreeBSD-SA-20:22",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
               },
               {
                  name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211843",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211850",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211844",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211931",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211952",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/19",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/20",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/22",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211935",
               },
               {
                  name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Dec/32",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:07:03",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "FEDORA-2020-0477f8840e",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
            },
            {
               name: "USN-4394-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4394-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://sqlite.org/src/info/0d69f76f0865f962",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200608-0002/",
            },
            {
               name: "GLSA-202007-26",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-26",
            },
            {
               name: "FreeBSD-SA-20:22",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
            },
            {
               name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211843",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211850",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211844",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211931",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211952",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/19",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/20",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/22",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211935",
            },
            {
               name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Dec/32",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13630",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "FEDORA-2020-0477f8840e",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
                  },
                  {
                     name: "USN-4394-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4394-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2020.html",
                  },
                  {
                     name: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
                     refsource: "MISC",
                     url: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
                  },
                  {
                     name: "https://sqlite.org/src/info/0d69f76f0865f962",
                     refsource: "MISC",
                     url: "https://sqlite.org/src/info/0d69f76f0865f962",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200608-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200608-0002/",
                  },
                  {
                     name: "GLSA-202007-26",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-26",
                  },
                  {
                     name: "FreeBSD-SA-20:22",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
                  },
                  {
                     name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211843",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211843",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211850",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211850",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211844",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211844",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211931",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211931",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211952",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211952",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/19",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/20",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/22",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211935",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211935",
                  },
                  {
                     name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Dec/32",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13630",
      datePublished: "2020-05-27T14:42:44",
      dateReserved: "2020-05-27T00:00:00",
      dateUpdated: "2024-08-04T12:25:16.317Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-9327

Vulnerability from cvelistv5

Published

2020-02-21 21:25

Modified

2024-08-04 10:26

Severity ?

Summary

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/202003-16	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/4298-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://www.sqlite.org/cgi/src/info/9d0d4ab95dc0c56e	x_refsource_MISC
	https://www.sqlite.org/cgi/src/info/abc473fb8fb99900	x_refsource_MISC
	https://www.sqlite.org/cgi/src/info/4374860b29383380	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200313-0002/	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuoct2020.html	x_refsource_MISC
	https://www.oracle.com/security-alerts/cpujan2021.html	x_refsource_MISC
	https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T10:26:16.084Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "GLSA-202003-16",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202003-16",
               },
               {
                  name: "USN-4298-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4298-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/cgi/src/info/9d0d4ab95dc0c56e",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/cgi/src/info/abc473fb8fb99900",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/cgi/src/info/4374860b29383380",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200313-0002/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujan2021.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:08:22",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "GLSA-202003-16",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202003-16",
            },
            {
               name: "USN-4298-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4298-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/cgi/src/info/9d0d4ab95dc0c56e",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/cgi/src/info/abc473fb8fb99900",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/cgi/src/info/4374860b29383380",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200313-0002/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujan2021.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-9327",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "GLSA-202003-16",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202003-16",
                  },
                  {
                     name: "USN-4298-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4298-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2020.html",
                  },
                  {
                     name: "https://www.sqlite.org/cgi/src/info/9d0d4ab95dc0c56e",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/cgi/src/info/9d0d4ab95dc0c56e",
                  },
                  {
                     name: "https://www.sqlite.org/cgi/src/info/abc473fb8fb99900",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/cgi/src/info/abc473fb8fb99900",
                  },
                  {
                     name: "https://www.sqlite.org/cgi/src/info/4374860b29383380",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/cgi/src/info/4374860b29383380",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200313-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200313-0002/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujan2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujan2021.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-9327",
      datePublished: "2020-02-21T21:25:14",
      dateReserved: "2020-02-21T00:00:00",
      dateUpdated: "2024-08-04T10:26:16.084Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13435

Vulnerability from cvelistv5

Published

2020-05-24 21:55

Modified

2024-08-04 12:18

Severity ?

Summary

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.

References

▼	URL	Tags
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/4394-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200528-0004/	x_refsource_CONFIRM
	https://www.sqlite.org/src/info/7a5279a25c57adf1	x_refsource_MISC
	https://security.gentoo.org/glsa/202007-26	vendor-advisory, x_refsource_GENTOO
	https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc	vendor-advisory, x_refsource_FREEBSD
	http://seclists.org/fulldisclosure/2020/Nov/19	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Nov/20	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Nov/22	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Dec/32	mailing-list, x_refsource_FULLDISC
	https://support.apple.com/kb/HT211843	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211850	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211844	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211931	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
	https://support.apple.com/kb/HT211952	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211935	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:18:18.257Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2020-0477f8840e",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
               },
               {
                  name: "USN-4394-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4394-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200528-0004/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/src/info/7a5279a25c57adf1",
               },
               {
                  name: "GLSA-202007-26",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-26",
               },
               {
                  name: "FreeBSD-SA-20:22",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/19",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/20",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/22",
               },
               {
                  name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Dec/32",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211843",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211850",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211844",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211931",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211952",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211935",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-06-14T17:20:15",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "FEDORA-2020-0477f8840e",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
            },
            {
               name: "USN-4394-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4394-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200528-0004/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/src/info/7a5279a25c57adf1",
            },
            {
               name: "GLSA-202007-26",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-26",
            },
            {
               name: "FreeBSD-SA-20:22",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/19",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/20",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/22",
            },
            {
               name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Dec/32",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211843",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211850",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211844",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211931",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211952",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211935",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13435",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "FEDORA-2020-0477f8840e",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
                  },
                  {
                     name: "USN-4394-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4394-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2020.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200528-0004/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200528-0004/",
                  },
                  {
                     name: "https://www.sqlite.org/src/info/7a5279a25c57adf1",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/src/info/7a5279a25c57adf1",
                  },
                  {
                     name: "GLSA-202007-26",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-26",
                  },
                  {
                     name: "FreeBSD-SA-20:22",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/19",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/20",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/22",
                  },
                  {
                     name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Dec/32",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211843",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211843",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211850",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211850",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211844",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211844",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211931",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211931",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211952",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211952",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211935",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211935",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13435",
      datePublished: "2020-05-24T21:55:17",
      dateReserved: "2020-05-24T00:00:00",
      dateUpdated: "2024-08-04T12:18:18.257Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-20218

Vulnerability from cvelistv5

Published

2020-01-02 02:51

Modified

2024-08-05 02:39

Severity ?

Summary

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.

References

▼	URL	Tags
	https://github.com/sqlite/sqlite/commit/a6c1a71cde082e09750465d5675699062922e387	x_refsource_MISC
	https://usn.ubuntu.com/4298-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://security.gentoo.org/glsa/202007-26	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2020/12/msg00016.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:39:09.214Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/a6c1a71cde082e09750465d5675699062922e387",
               },
               {
                  name: "USN-4298-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4298-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  name: "GLSA-202007-26",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-26",
               },
               {
                  name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
               },
               {
                  name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2340-2] sqlite3 regression update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00016.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-12-10T23:06:09",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/a6c1a71cde082e09750465d5675699062922e387",
            },
            {
               name: "USN-4298-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4298-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               name: "GLSA-202007-26",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-26",
            },
            {
               name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
            },
            {
               name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2340-2] sqlite3 regression update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00016.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-20218",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/sqlite/sqlite/commit/a6c1a71cde082e09750465d5675699062922e387",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/a6c1a71cde082e09750465d5675699062922e387",
                  },
                  {
                     name: "USN-4298-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4298-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "GLSA-202007-26",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-26",
                  },
                  {
                     name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
                  },
                  {
                     name: "[debian-lts-announce] 20201210 [SECURITY] [DLA 2340-2] sqlite3 regression update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00016.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-20218",
      datePublished: "2020-01-02T02:51:58",
      dateReserved: "2020-01-02T00:00:00",
      dateUpdated: "2024-08-05T02:39:09.214Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-19317

Vulnerability from cvelistv5

Published

2019-12-05 13:53

Modified

2024-08-05 02:16

Severity ?

Summary

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

References

▼	URL	Tags
	https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3	x_refsource_MISC
	https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20191223-0001/	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:16:46.758Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:07:42",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19317",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3",
                  },
                  {
                     name: "https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20191223-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19317",
      datePublished: "2019-12-05T13:53:16",
      dateReserved: "2019-11-26T00:00:00",
      dateUpdated: "2024-08-05T02:16:46.758Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-19926

Vulnerability from cvelistv5

Published

2019-12-23 00:53

Modified

2024-08-05 02:32

Severity ?

Summary

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.

References

▼	URL	Tags
	https://github.com/sqlite/sqlite/commit/8428b3b437569338a9d1e10c4cd8154acbe33089	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200114-0003/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2020:0514	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://www.debian.org/security/2020/dsa-4638	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/4298-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://usn.ubuntu.com/4298-2/	vendor-advisory, x_refsource_UBUNTU
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:32:09.777Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/8428b3b437569338a9d1e10c4cd8154acbe33089",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
               },
               {
                  name: "openSUSE-SU-2020:0189",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
               },
               {
                  name: "openSUSE-SU-2020:0210",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
               },
               {
                  name: "RHSA-2020:0514",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2020:0514",
               },
               {
                  name: "openSUSE-SU-2020:0233",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
               },
               {
                  name: "DSA-4638",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4638",
               },
               {
                  name: "USN-4298-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4298-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  name: "USN-4298-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4298-2/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:08:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/8428b3b437569338a9d1e10c4cd8154acbe33089",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
            },
            {
               name: "openSUSE-SU-2020:0189",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
            },
            {
               name: "openSUSE-SU-2020:0210",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
            },
            {
               name: "RHSA-2020:0514",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2020:0514",
            },
            {
               name: "openSUSE-SU-2020:0233",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
            },
            {
               name: "DSA-4638",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4638",
            },
            {
               name: "USN-4298-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4298-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               name: "USN-4298-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4298-2/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19926",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/sqlite/sqlite/commit/8428b3b437569338a9d1e10c4cd8154acbe33089",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/8428b3b437569338a9d1e10c4cd8154acbe33089",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200114-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
                  },
                  {
                     name: "openSUSE-SU-2020:0189",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0210",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
                  },
                  {
                     name: "RHSA-2020:0514",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2020:0514",
                  },
                  {
                     name: "openSUSE-SU-2020:0233",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
                  },
                  {
                     name: "DSA-4638",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4638",
                  },
                  {
                     name: "USN-4298-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4298-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "USN-4298-2",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4298-2/",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19926",
      datePublished: "2019-12-23T00:53:23",
      dateReserved: "2019-12-23T00:00:00",
      dateUpdated: "2024-08-05T02:32:09.777Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-3414

Vulnerability from cvelistv5

Published

2015-04-24 17:00

Modified

2024-08-06 05:47

Severity ?

Summary

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE"""""""" at the end of a SELECT statement.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-1635.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1033703	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/74228	vdb-entry, x_refsource_BID
	http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html	vendor-advisory, x_refsource_APPLE
	https://security.gentoo.org/glsa/201507-05	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2698-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	https://support.apple.com/HT205267	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html	vendor-advisory, x_refsource_APPLE
	https://www.sqlite.org/src/info/eddc05e7bb31fae74daa86e0504a3478b99fa0f2	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:217	vendor-advisory, x_refsource_MANDRIVA
	https://support.apple.com/HT205213	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3252	vendor-advisory, x_refsource_DEBIAN
	http://seclists.org/fulldisclosure/2015/Apr/31	mailing-list, x_refsource_FULLDISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T05:47:57.689Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:1635",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-1635.html",
               },
               {
                  name: "1033703",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033703",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
               },
               {
                  name: "74228",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/74228",
               },
               {
                  name: "APPLE-SA-2015-09-30-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
               },
               {
                  name: "GLSA-201507-05",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201507-05",
               },
               {
                  name: "USN-2698-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2698-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT205267",
               },
               {
                  name: "APPLE-SA-2015-09-21-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/src/info/eddc05e7bb31fae74daa86e0504a3478b99fa0f2",
               },
               {
                  name: "MDVSA-2015:217",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT205213",
               },
               {
                  name: "DSA-3252",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3252",
               },
               {
                  name: "20150414 several issues in SQLite (+ catching up on several other bugs)",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2015/Apr/31",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-04-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE\"\"\"\"\"\"\"\" at the end of a SELECT statement.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-07-18T12:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2015:1635",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-1635.html",
            },
            {
               name: "1033703",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033703",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
            },
            {
               name: "74228",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/74228",
            },
            {
               name: "APPLE-SA-2015-09-30-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
            },
            {
               name: "GLSA-201507-05",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201507-05",
            },
            {
               name: "USN-2698-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2698-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT205267",
            },
            {
               name: "APPLE-SA-2015-09-21-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.sqlite.org/src/info/eddc05e7bb31fae74daa86e0504a3478b99fa0f2",
            },
            {
               name: "MDVSA-2015:217",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT205213",
            },
            {
               name: "DSA-3252",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3252",
            },
            {
               name: "20150414 several issues in SQLite (+ catching up on several other bugs)",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2015/Apr/31",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-3414",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE\"\"\"\"\"\"\"\" at the end of a SELECT statement.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2015:1635",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-1635.html",
                  },
                  {
                     name: "1033703",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033703",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
                  },
                  {
                     name: "74228",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/74228",
                  },
                  {
                     name: "APPLE-SA-2015-09-30-3",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
                  },
                  {
                     name: "GLSA-201507-05",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201507-05",
                  },
                  {
                     name: "USN-2698-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2698-1",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                  },
                  {
                     name: "https://support.apple.com/HT205267",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT205267",
                  },
                  {
                     name: "APPLE-SA-2015-09-21-1",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
                  },
                  {
                     name: "https://www.sqlite.org/src/info/eddc05e7bb31fae74daa86e0504a3478b99fa0f2",
                     refsource: "CONFIRM",
                     url: "https://www.sqlite.org/src/info/eddc05e7bb31fae74daa86e0504a3478b99fa0f2",
                  },
                  {
                     name: "MDVSA-2015:217",
                     refsource: "MANDRIVA",
                     url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
                  },
                  {
                     name: "https://support.apple.com/HT205213",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT205213",
                  },
                  {
                     name: "DSA-3252",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3252",
                  },
                  {
                     name: "20150414 several issues in SQLite (+ catching up on several other bugs)",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2015/Apr/31",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-3414",
      datePublished: "2015-04-24T17:00:00",
      dateReserved: "2015-04-24T00:00:00",
      dateUpdated: "2024-08-06T05:47:57.689Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-19925

Vulnerability from cvelistv5

Published

2019-12-24 16:03

Modified

2024-08-05 02:32

Severity ?

Summary

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

References

▼	URL	Tags
	https://github.com/sqlite/sqlite/commit/54d501092d88c0cf89bec4279951f548fb0b8618	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200114-0003/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2020:0514	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://www.debian.org/security/2020/dsa-4638	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/4298-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:32:09.706Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/54d501092d88c0cf89bec4279951f548fb0b8618",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
               },
               {
                  name: "openSUSE-SU-2020:0189",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
               },
               {
                  name: "openSUSE-SU-2020:0210",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
               },
               {
                  name: "RHSA-2020:0514",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2020:0514",
               },
               {
                  name: "openSUSE-SU-2020:0233",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
               },
               {
                  name: "DSA-4638",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4638",
               },
               {
                  name: "USN-4298-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4298-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:07:21",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/54d501092d88c0cf89bec4279951f548fb0b8618",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
            },
            {
               name: "openSUSE-SU-2020:0189",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
            },
            {
               name: "openSUSE-SU-2020:0210",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
            },
            {
               name: "RHSA-2020:0514",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2020:0514",
            },
            {
               name: "openSUSE-SU-2020:0233",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
            },
            {
               name: "DSA-4638",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4638",
            },
            {
               name: "USN-4298-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4298-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19925",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/sqlite/sqlite/commit/54d501092d88c0cf89bec4279951f548fb0b8618",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/54d501092d88c0cf89bec4279951f548fb0b8618",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200114-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
                  },
                  {
                     name: "openSUSE-SU-2020:0189",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0210",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
                  },
                  {
                     name: "RHSA-2020:0514",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2020:0514",
                  },
                  {
                     name: "openSUSE-SU-2020:0233",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
                  },
                  {
                     name: "DSA-4638",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4638",
                  },
                  {
                     name: "USN-4298-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4298-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19925",
      datePublished: "2019-12-24T16:03:07",
      dateReserved: "2019-12-23T00:00:00",
      dateUpdated: "2024-08-05T02:32:09.706Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-19646

Vulnerability from cvelistv5

Published

2019-12-09 18:36

Modified

2024-08-05 02:25

Severity ?

Summary

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

References

▼	URL	Tags
	https://www.sqlite.org/	x_refsource_MISC
	https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd	x_refsource_MISC
	https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20191223-0001/	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:25:12.306Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.tenable.com/security/tns-2021-14",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:08:24",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.tenable.com/security/tns-2021-14",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19646",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.sqlite.org/",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/",
                  },
                  {
                     name: "https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd",
                  },
                  {
                     name: "https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20191223-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "https://www.tenable.com/security/tns-2021-14",
                     refsource: "CONFIRM",
                     url: "https://www.tenable.com/security/tns-2021-14",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19646",
      datePublished: "2019-12-09T18:36:18",
      dateReserved: "2019-12-08T00:00:00",
      dateUpdated: "2024-08-05T02:25:12.306Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13632

Vulnerability from cvelistv5

Published

2020-05-27 14:42

Modified

2024-08-04 12:25

Severity ?

Summary

ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

References

▼	URL	Tags
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/4394-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://bugs.chromium.org/p/chromium/issues/detail?id=1080459	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200608-0002/	x_refsource_CONFIRM
	https://sqlite.org/src/info/a4dd148928ea65bd	x_refsource_MISC
	https://security.gentoo.org/glsa/202007-26	vendor-advisory, x_refsource_GENTOO
	https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc	vendor-advisory, x_refsource_FREEBSD
	https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html	mailing-list, x_refsource_MLIST
	https://www.oracle.com/security-alerts/cpuoct2020.html	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:25:16.387Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2020-0477f8840e",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
               },
               {
                  name: "USN-4394-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4394-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200608-0002/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://sqlite.org/src/info/a4dd148928ea65bd",
               },
               {
                  name: "GLSA-202007-26",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-26",
               },
               {
                  name: "FreeBSD-SA-20:22",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
               },
               {
                  name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:07:05",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "FEDORA-2020-0477f8840e",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
            },
            {
               name: "USN-4394-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4394-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200608-0002/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://sqlite.org/src/info/a4dd148928ea65bd",
            },
            {
               name: "GLSA-202007-26",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-26",
            },
            {
               name: "FreeBSD-SA-20:22",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
            },
            {
               name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13632",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "FEDORA-2020-0477f8840e",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
                  },
                  {
                     name: "USN-4394-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4394-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2020.html",
                  },
                  {
                     name: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
                     refsource: "MISC",
                     url: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200608-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200608-0002/",
                  },
                  {
                     name: "https://sqlite.org/src/info/a4dd148928ea65bd",
                     refsource: "MISC",
                     url: "https://sqlite.org/src/info/a4dd148928ea65bd",
                  },
                  {
                     name: "GLSA-202007-26",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-26",
                  },
                  {
                     name: "FreeBSD-SA-20:22",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
                  },
                  {
                     name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13632",
      datePublished: "2020-05-27T14:42:17",
      dateReserved: "2020-05-27T00:00:00",
      dateUpdated: "2024-08-04T12:25:16.387Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-15358

Vulnerability from cvelistv5

Published

2020-06-27 11:39

Modified

2024-08-04 13:15

Severity ?

Summary

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

References

▼	URL	Tags
	https://www.sqlite.org/src/tktview?name=8f157e8010	x_refsource_MISC
	https://www.sqlite.org/src/timeline?p=version-3.32.3&bt=version-3.32.2	x_refsource_MISC
	https://www.sqlite.org/src/info/10fa79d00f8091e5	x_refsource_MISC
	https://security.gentoo.org/glsa/202007-26	vendor-advisory, x_refsource_GENTOO
	https://usn.ubuntu.com/4438-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpuoct2020.html	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200709-0001/	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2020/Nov/19	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Nov/20	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Nov/22	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Dec/32	mailing-list, x_refsource_FULLDISC
	https://www.oracle.com/security-alerts/cpujan2021.html	x_refsource_MISC
	https://support.apple.com/kb/HT211843	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211850	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211844	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211847	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211931	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2021/Feb/14	mailing-list, x_refsource_FULLDISC
	https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
	https://support.apple.com/kb/HT212147	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuapr2022.html	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T13:15:20.050Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/src/tktview?name=8f157e8010",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/src/timeline?p=version-3.32.3&bt=version-3.32.2",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/src/info/10fa79d00f8091e5",
               },
               {
                  name: "GLSA-202007-26",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-26",
               },
               {
                  name: "USN-4438-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4438-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200709-0001/",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/19",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/20",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/22",
               },
               {
                  name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Dec/32",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujan2021.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211843",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211850",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211844",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211847",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211931",
               },
               {
                  name: "20210201 APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2021/Feb/14",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT212147",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-04-19T23:21:43",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/src/tktview?name=8f157e8010",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/src/timeline?p=version-3.32.3&bt=version-3.32.2",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/src/info/10fa79d00f8091e5",
            },
            {
               name: "GLSA-202007-26",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-26",
            },
            {
               name: "USN-4438-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4438-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200709-0001/",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/19",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/20",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/22",
            },
            {
               name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Dec/32",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujan2021.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211843",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211850",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211844",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211847",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211931",
            },
            {
               name: "20210201 APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2021/Feb/14",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT212147",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-15358",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://www.sqlite.org/src/tktview?name=8f157e8010",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/src/tktview?name=8f157e8010",
                  },
                  {
                     name: "https://www.sqlite.org/src/timeline?p=version-3.32.3&bt=version-3.32.2",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/src/timeline?p=version-3.32.3&bt=version-3.32.2",
                  },
                  {
                     name: "https://www.sqlite.org/src/info/10fa79d00f8091e5",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/src/info/10fa79d00f8091e5",
                  },
                  {
                     name: "GLSA-202007-26",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-26",
                  },
                  {
                     name: "USN-4438-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4438-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200709-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200709-0001/",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/19",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/20",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/22",
                  },
                  {
                     name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Dec/32",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujan2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujan2021.html",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211843",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211843",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211850",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211850",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211844",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211844",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211847",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211847",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211931",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211931",
                  },
                  {
                     name: "20210201 APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2021/Feb/14",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                  },
                  {
                     name: "https://support.apple.com/kb/HT212147",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT212147",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2022.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-15358",
      datePublished: "2020-06-27T11:39:37",
      dateReserved: "2020-06-27T00:00:00",
      dateUpdated: "2024-08-04T13:15:20.050Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13631

Vulnerability from cvelistv5

Published

2020-05-27 14:42

Modified

2024-08-04 12:25

Severity ?

Summary

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

References

▼	URL	Tags
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/4394-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://bugs.chromium.org/p/chromium/issues/detail?id=1080459	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200608-0002/	x_refsource_CONFIRM
	https://sqlite.org/src/info/eca0ba2cf4c0fdf7	x_refsource_MISC
	https://security.gentoo.org/glsa/202007-26	vendor-advisory, x_refsource_GENTOO
	https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc	vendor-advisory, x_refsource_FREEBSD
	https://support.apple.com/kb/HT211843	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211850	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211844	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuoct2020.html	x_refsource_MISC
	https://support.apple.com/kb/HT211931	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211952	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2020/Nov/19	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Nov/20	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Nov/22	mailing-list, x_refsource_FULLDISC
	https://support.apple.com/kb/HT211935	x_refsource_CONFIRM
	http://seclists.org/fulldisclosure/2020/Dec/32	mailing-list, x_refsource_FULLDISC
	https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E	mailing-list, x_refsource_MLIST
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:25:16.415Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "FEDORA-2020-0477f8840e",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
               },
               {
                  name: "USN-4394-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4394-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200608-0002/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://sqlite.org/src/info/eca0ba2cf4c0fdf7",
               },
               {
                  name: "GLSA-202007-26",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-26",
               },
               {
                  name: "FreeBSD-SA-20:22",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211843",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211850",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211844",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211931",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211952",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/19",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/20",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/22",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211935",
               },
               {
                  name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Dec/32",
               },
               {
                  name: "[guacamole-issues] 20210618 [jira] [Created] (GUACAMOLE-1368) Latest docker image fails security scans.",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:08:36",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "FEDORA-2020-0477f8840e",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
            },
            {
               name: "USN-4394-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4394-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200608-0002/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://sqlite.org/src/info/eca0ba2cf4c0fdf7",
            },
            {
               name: "GLSA-202007-26",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-26",
            },
            {
               name: "FreeBSD-SA-20:22",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211843",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211850",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211844",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211931",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211952",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/19",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/20",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/22",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211935",
            },
            {
               name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Dec/32",
            },
            {
               name: "[guacamole-issues] 20210618 [jira] [Created] (GUACAMOLE-1368) Latest docker image fails security scans.",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13631",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "FEDORA-2020-0477f8840e",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
                  },
                  {
                     name: "USN-4394-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4394-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2020.html",
                  },
                  {
                     name: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
                     refsource: "MISC",
                     url: "https://bugs.chromium.org/p/chromium/issues/detail?id=1080459",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200608-0002/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200608-0002/",
                  },
                  {
                     name: "https://sqlite.org/src/info/eca0ba2cf4c0fdf7",
                     refsource: "MISC",
                     url: "https://sqlite.org/src/info/eca0ba2cf4c0fdf7",
                  },
                  {
                     name: "GLSA-202007-26",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-26",
                  },
                  {
                     name: "FreeBSD-SA-20:22",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211843",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211843",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211850",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211850",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211844",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211844",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuoct2020.html",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211931",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211931",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211952",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211952",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/19",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/20",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/22",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211935",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211935",
                  },
                  {
                     name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Dec/32",
                  },
                  {
                     name: "[guacamole-issues] 20210618 [jira] [Created] (GUACAMOLE-1368) Latest docker image fails security scans.",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13631",
      datePublished: "2020-05-27T14:42:28",
      dateReserved: "2020-05-27T00:00:00",
      dateUpdated: "2024-08-04T12:25:16.415Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-19880

Vulnerability from cvelistv5

Published

2019-12-18 05:07

Modified

2024-08-05 02:32

Severity ?

Summary

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.

References

▼	URL	Tags
	https://github.com/sqlite/sqlite/commit/75e95e1fcd52d3ec8282edb75ac8cd0814095d54	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200114-0001/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2020:0514	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://www.debian.org/security/2020/dsa-4638	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/4298-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:32:09.358Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/75e95e1fcd52d3ec8282edb75ac8cd0814095d54",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200114-0001/",
               },
               {
                  name: "openSUSE-SU-2020:0189",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
               },
               {
                  name: "openSUSE-SU-2020:0210",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
               },
               {
                  name: "RHSA-2020:0514",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2020:0514",
               },
               {
                  name: "openSUSE-SU-2020:0233",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
               },
               {
                  name: "DSA-4638",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4638",
               },
               {
                  name: "USN-4298-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4298-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:08:12",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/75e95e1fcd52d3ec8282edb75ac8cd0814095d54",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200114-0001/",
            },
            {
               name: "openSUSE-SU-2020:0189",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
            },
            {
               name: "openSUSE-SU-2020:0210",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
            },
            {
               name: "RHSA-2020:0514",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2020:0514",
            },
            {
               name: "openSUSE-SU-2020:0233",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
            },
            {
               name: "DSA-4638",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4638",
            },
            {
               name: "USN-4298-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4298-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19880",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/sqlite/sqlite/commit/75e95e1fcd52d3ec8282edb75ac8cd0814095d54",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/75e95e1fcd52d3ec8282edb75ac8cd0814095d54",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200114-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200114-0001/",
                  },
                  {
                     name: "openSUSE-SU-2020:0189",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0210",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
                  },
                  {
                     name: "RHSA-2020:0514",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2020:0514",
                  },
                  {
                     name: "openSUSE-SU-2020:0233",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
                  },
                  {
                     name: "DSA-4638",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4638",
                  },
                  {
                     name: "USN-4298-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4298-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19880",
      datePublished: "2019-12-18T05:07:13",
      dateReserved: "2019-12-18T00:00:00",
      dateUpdated: "2024-08-05T02:32:09.358Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-19244

Vulnerability from cvelistv5

Published

2019-11-25 19:32

Modified

2024-08-05 02:09

Severity ?

Summary

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.

References

▼	URL	Tags
	https://github.com/sqlite/sqlite/commit/e59c562b3f6894f84c715772c4b116d7b5c01348	x_refsource_MISC
	https://usn.ubuntu.com/4205-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:09:39.566Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/e59c562b3f6894f84c715772c4b116d7b5c01348",
               },
               {
                  name: "USN-4205-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4205-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:06:53",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/e59c562b3f6894f84c715772c4b116d7b5c01348",
            },
            {
               name: "USN-4205-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4205-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19244",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/sqlite/sqlite/commit/e59c562b3f6894f84c715772c4b116d7b5c01348",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/e59c562b3f6894f84c715772c4b116d7b5c01348",
                  },
                  {
                     name: "USN-4205-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4205-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19244",
      datePublished: "2019-11-25T19:32:38",
      dateReserved: "2019-11-25T00:00:00",
      dateUpdated: "2024-08-05T02:09:39.566Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13434

Vulnerability from cvelistv5

Published

2020-05-24 21:55

Modified

2024-08-04 12:18

Severity ?

Summary

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

References

▼	URL	Tags
	https://lists.debian.org/debian-lts-announce/2020/05/msg00024.html	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/	vendor-advisory, x_refsource_FEDORA
	https://usn.ubuntu.com/4394-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpujul2020.html	x_refsource_MISC
	https://www.sqlite.org/src/info/23439ea582241138	x_refsource_MISC
	https://www.sqlite.org/src/info/d08d3405878d394e	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200528-0004/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/202007-26	vendor-advisory, x_refsource_GENTOO
	https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc	vendor-advisory, x_refsource_FREEBSD
	https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html	mailing-list, x_refsource_MLIST
	http://seclists.org/fulldisclosure/2020/Nov/19	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Nov/20	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Nov/22	mailing-list, x_refsource_FULLDISC
	http://seclists.org/fulldisclosure/2020/Dec/32	mailing-list, x_refsource_FULLDISC
	https://support.apple.com/kb/HT211843	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211850	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211844	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211931	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuApr2021.html	x_refsource_MISC
	https://support.apple.com/kb/HT211952	x_refsource_CONFIRM
	https://support.apple.com/kb/HT211935	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuapr2022.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:18:18.326Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "[debian-lts-announce] 20200526 [SECURITY] [DLA 2221-1] sqlite3",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00024.html",
               },
               {
                  name: "FEDORA-2020-0477f8840e",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
               },
               {
                  name: "USN-4394-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4394-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpujul2020.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/src/info/23439ea582241138",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/src/info/d08d3405878d394e",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200528-0004/",
               },
               {
                  name: "GLSA-202007-26",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-26",
               },
               {
                  name: "FreeBSD-SA-20:22",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FREEBSD",
                     "x_transferred",
                  ],
                  url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
               },
               {
                  name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/19",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/20",
               },
               {
                  name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Nov/22",
               },
               {
                  name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2020/Dec/32",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211843",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211850",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211844",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211931",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211952",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/kb/HT211935",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-04-19T23:21:16",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "[debian-lts-announce] 20200526 [SECURITY] [DLA 2221-1] sqlite3",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00024.html",
            },
            {
               name: "FEDORA-2020-0477f8840e",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
            },
            {
               name: "USN-4394-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4394-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpujul2020.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/src/info/23439ea582241138",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.sqlite.org/src/info/d08d3405878d394e",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200528-0004/",
            },
            {
               name: "GLSA-202007-26",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-26",
            },
            {
               name: "FreeBSD-SA-20:22",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FREEBSD",
               ],
               url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
            },
            {
               name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/19",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/20",
            },
            {
               name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Nov/22",
            },
            {
               name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2020/Dec/32",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211843",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211850",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211844",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211931",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211952",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/kb/HT211935",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13434",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "[debian-lts-announce] 20200526 [SECURITY] [DLA 2221-1] sqlite3",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00024.html",
                  },
                  {
                     name: "FEDORA-2020-0477f8840e",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/",
                  },
                  {
                     name: "USN-4394-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4394-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpujul2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpujul2020.html",
                  },
                  {
                     name: "https://www.sqlite.org/src/info/23439ea582241138",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/src/info/23439ea582241138",
                  },
                  {
                     name: "https://www.sqlite.org/src/info/d08d3405878d394e",
                     refsource: "MISC",
                     url: "https://www.sqlite.org/src/info/d08d3405878d394e",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200528-0004/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200528-0004/",
                  },
                  {
                     name: "GLSA-202007-26",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-26",
                  },
                  {
                     name: "FreeBSD-SA-20:22",
                     refsource: "FREEBSD",
                     url: "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc",
                  },
                  {
                     name: "[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/19",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/20",
                  },
                  {
                     name: "20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Nov/22",
                  },
                  {
                     name: "20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2020/Dec/32",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211843",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211843",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211850",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211850",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211844",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211844",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211931",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211931",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuApr2021.html",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211952",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211952",
                  },
                  {
                     name: "https://support.apple.com/kb/HT211935",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/kb/HT211935",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2022.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13434",
      datePublished: "2020-05-24T21:55:27",
      dateReserved: "2020-05-24T00:00:00",
      dateUpdated: "2024-08-04T12:18:18.326Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-19923

Vulnerability from cvelistv5

Published

2019-12-24 15:43

Modified

2024-08-05 02:32

Severity ?

Summary

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

References

▼	URL	Tags
	https://github.com/sqlite/sqlite/commit/396afe6f6aa90a31303c183e11b2b2d4b7956b35	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200114-0003/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2020:0514	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html	vendor-advisory, x_refsource_SUSE
	https://www.debian.org/security/2020/dsa-4638	vendor-advisory, x_refsource_DEBIAN
	https://usn.ubuntu.com/4298-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:32:09.514Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/396afe6f6aa90a31303c183e11b2b2d4b7956b35",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
               },
               {
                  name: "openSUSE-SU-2020:0189",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
               },
               {
                  name: "openSUSE-SU-2020:0210",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
               },
               {
                  name: "RHSA-2020:0514",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2020:0514",
               },
               {
                  name: "openSUSE-SU-2020:0233",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
               },
               {
                  name: "DSA-4638",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4638",
               },
               {
                  name: "USN-4298-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4298-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:08:33",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/396afe6f6aa90a31303c183e11b2b2d4b7956b35",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
            },
            {
               name: "openSUSE-SU-2020:0189",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
            },
            {
               name: "openSUSE-SU-2020:0210",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
            },
            {
               name: "RHSA-2020:0514",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2020:0514",
            },
            {
               name: "openSUSE-SU-2020:0233",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
            },
            {
               name: "DSA-4638",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4638",
            },
            {
               name: "USN-4298-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4298-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19923",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/sqlite/sqlite/commit/396afe6f6aa90a31303c183e11b2b2d4b7956b35",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/396afe6f6aa90a31303c183e11b2b2d4b7956b35",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200114-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
                  },
                  {
                     name: "openSUSE-SU-2020:0189",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0210",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html",
                  },
                  {
                     name: "RHSA-2020:0514",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2020:0514",
                  },
                  {
                     name: "openSUSE-SU-2020:0233",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html",
                  },
                  {
                     name: "DSA-4638",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4638",
                  },
                  {
                     name: "USN-4298-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4298-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19923",
      datePublished: "2019-12-24T15:43:33",
      dateReserved: "2019-12-23T00:00:00",
      dateUpdated: "2024-08-05T02:32:09.514Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2015-3415

Vulnerability from cvelistv5

Published

2015-04-24 17:00

Modified

2024-08-06 05:47

Severity ?

Summary

The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2015-1635.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1033703	vdb-entry, x_refsource_SECTRACK
	http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/74228	vdb-entry, x_refsource_BID
	http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html	vendor-advisory, x_refsource_APPLE
	https://security.gentoo.org/glsa/201507-05	vendor-advisory, x_refsource_GENTOO
	http://www.ubuntu.com/usn/USN-2698-1	vendor-advisory, x_refsource_UBUNTU
	http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html	x_refsource_CONFIRM
	https://support.apple.com/HT205267	x_refsource_CONFIRM
	http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html	vendor-advisory, x_refsource_APPLE
	https://www.sqlite.org/src/info/02e3c88fbf6abdcf3975fb0fb71972b0ab30da30	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDVSA-2015:217	vendor-advisory, x_refsource_MANDRIVA
	https://support.apple.com/HT205213	x_refsource_CONFIRM
	http://www.debian.org/security/2015/dsa-3252	vendor-advisory, x_refsource_DEBIAN
	http://seclists.org/fulldisclosure/2015/Apr/31	mailing-list, x_refsource_FULLDISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T05:47:57.679Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2015:1635",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2015-1635.html",
               },
               {
                  name: "1033703",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1033703",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
               },
               {
                  name: "74228",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/74228",
               },
               {
                  name: "APPLE-SA-2015-09-30-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
               },
               {
                  name: "GLSA-201507-05",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201507-05",
               },
               {
                  name: "USN-2698-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-2698-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT205267",
               },
               {
                  name: "APPLE-SA-2015-09-21-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_APPLE",
                     "x_transferred",
                  ],
                  url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.sqlite.org/src/info/02e3c88fbf6abdcf3975fb0fb71972b0ab30da30",
               },
               {
                  name: "MDVSA-2015:217",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_MANDRIVA",
                     "x_transferred",
                  ],
                  url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.apple.com/HT205213",
               },
               {
                  name: "DSA-3252",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2015/dsa-3252",
               },
               {
                  name: "20150414 several issues in SQLite (+ catching up on several other bugs)",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2015/Apr/31",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2015-04-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2018-07-18T12:57:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "RHSA-2015:1635",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2015-1635.html",
            },
            {
               name: "1033703",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1033703",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
            },
            {
               name: "74228",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/74228",
            },
            {
               name: "APPLE-SA-2015-09-30-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
            },
            {
               name: "GLSA-201507-05",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201507-05",
            },
            {
               name: "USN-2698-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-2698-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT205267",
            },
            {
               name: "APPLE-SA-2015-09-21-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_APPLE",
               ],
               url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.sqlite.org/src/info/02e3c88fbf6abdcf3975fb0fb71972b0ab30da30",
            },
            {
               name: "MDVSA-2015:217",
               tags: [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
               ],
               url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.apple.com/HT205213",
            },
            {
               name: "DSA-3252",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2015/dsa-3252",
            },
            {
               name: "20150414 several issues in SQLite (+ catching up on several other bugs)",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2015/Apr/31",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2015-3415",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2015:1635",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2015-1635.html",
                  },
                  {
                     name: "1033703",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1033703",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
                  },
                  {
                     name: "74228",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/74228",
                  },
                  {
                     name: "APPLE-SA-2015-09-30-3",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",
                  },
                  {
                     name: "GLSA-201507-05",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201507-05",
                  },
                  {
                     name: "USN-2698-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-2698-1",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",
                  },
                  {
                     name: "https://support.apple.com/HT205267",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT205267",
                  },
                  {
                     name: "APPLE-SA-2015-09-21-1",
                     refsource: "APPLE",
                     url: "http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html",
                  },
                  {
                     name: "https://www.sqlite.org/src/info/02e3c88fbf6abdcf3975fb0fb71972b0ab30da30",
                     refsource: "CONFIRM",
                     url: "https://www.sqlite.org/src/info/02e3c88fbf6abdcf3975fb0fb71972b0ab30da30",
                  },
                  {
                     name: "MDVSA-2015:217",
                     refsource: "MANDRIVA",
                     url: "http://www.mandriva.com/security/advisories?name=MDVSA-2015:217",
                  },
                  {
                     name: "https://support.apple.com/HT205213",
                     refsource: "CONFIRM",
                     url: "https://support.apple.com/HT205213",
                  },
                  {
                     name: "DSA-3252",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2015/dsa-3252",
                  },
                  {
                     name: "20150414 several issues in SQLite (+ catching up on several other bugs)",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2015/Apr/31",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2015-3415",
      datePublished: "2015-04-24T17:00:00",
      dateReserved: "2015-04-24T00:00:00",
      dateUpdated: "2024-08-06T05:47:57.679Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-19924

Vulnerability from cvelistv5

Published

2019-12-24 15:53

Modified

2024-08-05 02:32

Severity ?

Summary

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

References

▼	URL	Tags
	https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200114-0003/	x_refsource_CONFIRM
	https://usn.ubuntu.com/4298-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E	mailing-list, x_refsource_MLIST
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:32:10.033Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
               },
               {
                  name: "USN-4298-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4298-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
               },
               {
                  name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:06:55",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
            },
            {
               name: "USN-4298-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4298-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
            },
            {
               name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19924",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200114-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200114-0003/",
                  },
                  {
                     name: "USN-4298-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4298-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E",
                  },
                  {
                     name: "[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19924",
      datePublished: "2019-12-24T15:53:59",
      dateReserved: "2019-12-23T00:00:00",
      dateUpdated: "2024-08-05T02:32:10.033Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-19959

Vulnerability from cvelistv5

Published

2020-01-03 21:37

Modified

2024-08-05 02:32

Severity ?

Summary

ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.

References

▼	URL	Tags
	https://github.com/sqlite/sqlite/commit/d8f2d46cbc9925e034a68aaaf60aad788d9373c1	x_refsource_MISC
	https://github.com/sqlite/sqlite/commit/1e490c4ca6b43a9cf8637d695907888349f69bec	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20200204-0001/	x_refsource_CONFIRM
	https://usn.ubuntu.com/4298-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:32:10.141Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/d8f2d46cbc9925e034a68aaaf60aad788d9373c1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/1e490c4ca6b43a9cf8637d695907888349f69bec",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20200204-0001/",
               },
               {
                  name: "USN-4298-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4298-1/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-04-15T21:06:55",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/d8f2d46cbc9925e034a68aaaf60aad788d9373c1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/1e490c4ca6b43a9cf8637d695907888349f69bec",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20200204-0001/",
            },
            {
               name: "USN-4298-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4298-1/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19959",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/sqlite/sqlite/commit/d8f2d46cbc9925e034a68aaaf60aad788d9373c1",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/d8f2d46cbc9925e034a68aaaf60aad788d9373c1",
                  },
                  {
                     name: "https://github.com/sqlite/sqlite/commit/1e490c4ca6b43a9cf8637d695907888349f69bec",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/1e490c4ca6b43a9cf8637d695907888349f69bec",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20200204-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20200204-0001/",
                  },
                  {
                     name: "USN-4298-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4298-1/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19959",
      datePublished: "2020-01-03T21:37:42",
      dateReserved: "2019-12-24T00:00:00",
      dateUpdated: "2024-08-05T02:32:10.141Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-19645

Vulnerability from cvelistv5

Published

2019-12-09 15:15

Modified

2024-08-05 02:25

Severity ?

Summary

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

References

▼	URL	Tags
	https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20191223-0001/	x_refsource_CONFIRM
	https://www.oracle.com/security-alerts/cpuapr2020.html	x_refsource_MISC
	https://usn.ubuntu.com/4394-1/	vendor-advisory, x_refsource_UBUNTU
	https://www.tenable.com/security/tns-2021-14	x_refsource_CONFIRM
	https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T02:25:12.456Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
               },
               {
                  name: "USN-4394-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4394-1/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.tenable.com/security/tns-2021-14",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-03-08T14:07:01",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
            },
            {
               name: "USN-4394-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4394-1/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.tenable.com/security/tns-2021-14",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2019-19645",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06",
                     refsource: "MISC",
                     url: "https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20191223-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20191223-0001/",
                  },
                  {
                     name: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                     refsource: "MISC",
                     url: "https://www.oracle.com/security-alerts/cpuapr2020.html",
                  },
                  {
                     name: "USN-4394-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4394-1/",
                  },
                  {
                     name: "https://www.tenable.com/security/tns-2021-14",
                     refsource: "CONFIRM",
                     url: "https://www.tenable.com/security/tns-2021-14",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2019-19645",
      datePublished: "2019-12-09T15:15:57",
      dateReserved: "2019-12-08T00:00:00",
      dateUpdated: "2024-08-05T02:25:12.456Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_opensuse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature