Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-20346

Опубликовано: 21 дек. 2018
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS2: 6.8
CVSS3: 8.1

Описание

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.

РелизСтатусПримечание
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

esm-infra-legacy/trusty

DNE

precise/esm

DNE

trusty

DNE

trusty/esm

DNE

upstream

released

71.0.3578.80-1
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

released

3.22.0-1ubuntu0.1
cosmic

released

3.24.0-1ubuntu0.1
devel

not-affected

3.26.0-3
disco

not-affected

3.26.0-3
esm-infra-legacy/trusty

released

3.8.2-1ubuntu2.2+esm1
esm-infra/bionic

released

3.22.0-1ubuntu0.1
esm-infra/xenial

released

3.11.0-1ubuntu1.2
precise/esm

not-affected

3.7.9-2ubuntu1.3
trusty

ignored

end of standard support
trusty/esm

released

3.8.2-1ubuntu2.2+esm1

Показывать по

EPSS

Процентиль: 95%
0.16791
Средний

6.8 Medium

CVSS2

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 7
redhat
больше 6 лет назад

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.

CVSS3: 8.1
nvd
больше 6 лет назад

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.

CVSS3: 8.1
msrc
около 1 года назад

Описание отсутствует

CVSS3: 8.1
debian
больше 6 лет назад

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters a ...

suse-cvrf
больше 6 лет назад

Security update for sqlite3

EPSS

Процентиль: 95%
0.16791
Средний

6.8 Medium

CVSS2

8.1 High

CVSS3