REDHAT-BUG-1788846: SQL Injection

Published Jan 8, 2020

Updated

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

Upstream fix:

https://github.com/sqlite/sqlite/commit/396afe6f6aa90a31303c183e11b2b2d4b7956b35

Affected Software

1 affected component

SQLite SQLite

Event History

Jan 8, 2020

Data Sourced

via Red Hat·08:53 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1788846?

The severity of REDHAT-BUG-1788846 is classified as a potential vulnerability due to the risk of NULL pointer dereference or incorrect results.

How do I fix REDHAT-BUG-1788846?

To fix REDHAT-BUG-1788846, users should upgrade to the latest version of SQLite that contains the upstream fix.

What versions of SQLite are affected by REDHAT-BUG-1788846?

REDHAT-BUG-1788846 affects SQLite 3.30.1 specifically, particularly in scenarios involving SELECT DISTINCT and LEFT JOIN with views.

What type of issue is described in REDHAT-BUG-1788846?

REDHAT-BUG-1788846 describes a mishandling issue in flattenSubquery in select.c that can lead to a NULL pointer dereference.

Is there an upstream fix for REDHAT-BUG-1788846?

Yes, there is an upstream fix for REDHAT-BUG-1788846 that has been implemented in later versions of SQLite.