REDHAT-BUG-1788866: SQL Injection
Published Jan 8, 2020
·Updated
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
Upstream Fix:
https://github.com/sqlite/sqlite/commit/54d501092d88c0cf89bec4279951f548fb0b8618
Affected Software
1 affected component
SQLite SQLite
Event History
Jan 8, 2020
Data Sourced
via Red Hat·09:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-1788866?
The severity of REDHAT-BUG-1788866 is classified as a potential risk due to mishandling a NULL pathname in SQLite.
2
How do I fix REDHAT-BUG-1788866?
To fix REDHAT-BUG-1788866, upgrade to the latest version of SQLite where the NULL pathname issue has been addressed.
3
What versions of SQLite are affected by REDHAT-BUG-1788866?
REDHAT-BUG-1788866 affects SQLite version 3.30.1.
4
What type of vulnerability is REDHAT-BUG-1788866?
REDHAT-BUG-1788866 is a vulnerability related to mishandling ZIP archive updates in the SQLite library.
5
Is there a patch available for REDHAT-BUG-1788866?
Yes, a patch has been implemented in the latest version of SQLite to resolve the issues described in REDHAT-BUG-1788866.