Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-8740

Опубликовано: 17 мар. 2018
Источник: redhat
CVSS3: 3.3

Описание

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.

A NULL pointer dereference vulnerability was found in SQLite. Loading a database whose schema was corrupted using a CREATE TABLE AS statement would result in a SQLite crash.

Отчет

Red Hat Product Security has rated this issue as having a security impact of Low. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5sqliteNot affected
Red Hat Enterprise Linux 6sqliteNot affected
Red Hat Enterprise Linux 7sqliteWill not fix
Red Hat Enterprise Linux 8sqliteNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1558804sqlite: NULL pointer dereference with databases with schema corrupted with CREATE TABLE AS allows for denial of service

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 8 лет назад

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.

CVSS3: 7.5
nvd
почти 8 лет назад

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.

CVSS3: 7.5
debian
почти 8 лет назад

In SQLite through 3.22.0, databases whose schema is corrupted using a ...

CVSS3: 7.5
github
больше 3 лет назад

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.

CVSS3: 7.5
fstec
почти 8 лет назад

Уязвимость компонентов build.c, prepare.c системы управления базами данных SQLite, позволяющая нарушителю вызвать отказ в обслуживании

3.3 Low

CVSS3