REDHAT-BUG-1791313: SQL Injection
First published: Wed Jan 15 2020(Updated: )
selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error. Reference and upstream commit: <a href="https://github.com/sqlite/sqlite/commit/a6c1a71cde082e09750465d5675699062922e387">https://github.com/sqlite/sqlite/commit/a6c1a71cde082e09750465d5675699062922e387</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SQLite JDBC |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/sqlite/sqlite/commit/a6c1a71cde082e09750465d5675699062922e387
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1791315
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1791316
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1791317
- https://access.redhat.com/errata/RHSA-2020:4442
- https://access.redhat.com/security/cve/cve-2019-20218
- https://bugzilla.redhat.com/show_bug.cgi?id=1791313
Frequently Asked Questions
What is the severity of REDHAT-BUG-1791313?
REDHAT-BUG-1791313 is categorized as a moderate severity vulnerability due to its potential for causing unintended behavior in SQLite.
How do I fix REDHAT-BUG-1791313?
To fix REDHAT-BUG-1791313, update to the latest version of SQLite where this issue has been resolved.
What systems are affected by REDHAT-BUG-1791313?
The vulnerability REDHAT-BUG-1791313 affects SQLite versions prior to the fix in SQLIte 3.30.1.
What does REDHAT-BUG-1791313 impact in SQLite?
REDHAT-BUG-1791313 impacts the selectExpander function in select.c, causing it to continue unwinding the WITH stack even after encountering a parsing error.
Is there a known exploit for REDHAT-BUG-1791313?
As of now, there are no publicly disclosed exploits specifically targeting REDHAT-BUG-1791313.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-20218
- agent/source
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sqlite
- canonical/sqlite