REDHAT-BUG-1787032: SQL Injection

Published Dec 30, 2019

Updated

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.

Reference and upstream commit: https://github.com/sqlite/sqlite/commit/75e95e1fcd52d3ec8282edb75ac8cd0814095d54

Affected Software

1 affected component

SQLite SQLite

Event History

Dec 30, 2019

Data Sourced

via Red Hat·01:49 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1787032?

The severity of REDHAT-BUG-1787032 is considered high due to the potential exploitation of an invalid pointer dereference.

How do I fix REDHAT-BUG-1787032?

To fix REDHAT-BUG-1787032, you should update to the latest version of SQLite that resolves this vulnerability.

Which versions of SQLite are affected by REDHAT-BUG-1787032?

REDHAT-BUG-1787032 affects SQLite version 3.30.1.

What type of vulnerability is REDHAT-BUG-1787032?

REDHAT-BUG-1787032 is an invalid pointer dereference vulnerability that can be triggered by mishandled ORDER BY clauses in window definitions.

Who can be affected by REDHAT-BUG-1787032?

Applications using SQLite 3.30.1 for database management may be affected by REDHAT-BUG-1787032, exposing them to potential attacks.