REDHAT-BUG-1791313: SQL Injection

Published Jan 15, 2020

Updated

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.

Reference and upstream commit: https://github.com/sqlite/sqlite/commit/a6c1a71cde082e09750465d5675699062922e387

Affected Software

1 affected component

SQLite SQLite

Event History

Jan 15, 2020

Data Sourced

via Red Hat·02:04 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1791313?

REDHAT-BUG-1791313 is categorized as a moderate severity vulnerability due to its potential for causing unintended behavior in SQLite.

How do I fix REDHAT-BUG-1791313?

To fix REDHAT-BUG-1791313, update to the latest version of SQLite where this issue has been resolved.

What systems are affected by REDHAT-BUG-1791313?

The vulnerability REDHAT-BUG-1791313 affects SQLite versions prior to the fix in SQLIte 3.30.1.

What does REDHAT-BUG-1791313 impact in SQLite?

REDHAT-BUG-1791313 impacts the selectExpander function in select.c, causing it to continue unwinding the WITH stack even after encountering a parsing error.

Is there a known exploit for REDHAT-BUG-1791313?

As of now, there are no publicly disclosed exploits specifically targeting REDHAT-BUG-1791313.