REDHAT-BUG-1788842: SQL Injection

Published Jan 8, 2020

Updated

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

Upstream fix:

https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3

Affected Software

1 affected component

SQLite SQLite

Event History

Jan 8, 2020

Data Sourced

via Red Hat·08:48 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1788842?

The severity of REDHAT-BUG-1788842 is generally classified as high due to potential arbitrary code execution vulnerabilities.

How do I fix REDHAT-BUG-1788842?

To fix REDHAT-BUG-1788842, update to the latest version of SQLite that includes the upstream fix for the vulnerability.

What systems are affected by REDHAT-BUG-1788842?

REDHAT-BUG-1788842 affects systems using SQLite version 3.30.1 and prior.

What is the nature of the vulnerability described in REDHAT-BUG-1788842?

The vulnerability in REDHAT-BUG-1788842 involves mishandling of parser-tree rewriting which can lead to incorrect error handling in SQLite.

Is there a known exploit for REDHAT-BUG-1788842?

While there is no widely known exploit for REDHAT-BUG-1788842, the nature of the vulnerability suggests the potential for exploitation.