REDHAT-BUG-1768986: SQL Injection
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlitestat1 sz field, aka a "severe division by zero in the query planner."
References: https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg116312.html https://www.sqlite.org/src/info/e4598ecbdd18bd82945f6029013296690e719a62
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1768986?
The severity of REDHAT-BUG-1768986 is considered severe due to a potential division by zero error in the query planner.
How does REDHAT-BUG-1768986 impact SQLite users?
REDHAT-BUG-1768986 can cause crashes in browsers or applications that use SQLite due to improper validation.
What is the version of SQLite affected by REDHAT-BUG-1768986?
SQLite versions up to and including 3.29.0 are affected by REDHAT-BUG-1768986.
How can I mitigate the risks associated with REDHAT-BUG-1768986?
Mitigation for REDHAT-BUG-1768986 involves upgrading SQLite to a version later than 3.29.0.
What does the REDHAT-BUG-1768986 vulnerability involve specifically?
REDHAT-BUG-1768986 involves missing validation of a sqlite_stat1 sz field, leading to potential crashes.