Описание
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| sqlite3 | fixed | 3.20.1-2 | package | |
| sqlite3 | not-affected | stretch | package | |
| sqlite3 | not-affected | jessie | package | |
| sqlite3 | not-affected | wheezy | package | |
| sqlite | not-affected | package |
Примечания
https://github.com/Ha0Team/crash-of-sqlite3/blob/master/poc.md
https://www.sqlite.org/src/info/5d0ceb8dcdef92cd
EPSS
Связанные уязвимости
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
ALT-PU-2018-1493: package `sqlite3` update to version 3.22.0-alt1
EPSS