REDHAT-BUG-1809315: SQL Injection

Published Mar 2, 2020

Updated

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

References: https://www.sqlite.org/cgi/src/info/4374860b29383380 https://www.sqlite.org/cgi/src/info/9d0d4ab95dc0c56e https://www.sqlite.org/cgi/src/info/abc473fb8fb99900

Affected Software

1 affected component

SQLite SQLite

Event History

Mar 2, 2020

Data Sourced

via Red Hat·08:24 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1809315?

The severity of REDHAT-BUG-1809315 is classified as high due to the potential for denial of service through a NULL pointer dereference.

How do I fix REDHAT-BUG-1809315?

To fix REDHAT-BUG-1809315, upgrade to a patched version of SQLite that addresses the NULL pointer dereference issue.

What versions of SQLite are affected by REDHAT-BUG-1809315?

SQLite version 3.31.1 is affected by the vulnerability described in REDHAT-BUG-1809315.

What impact does REDHAT-BUG-1809315 have on applications?

REDHAT-BUG-1809315 can cause applications using SQLite to crash unexpectedly, leading to potential service interruptions.

Is REDHAT-BUG-1809315 related to generated column optimizations?

Yes, REDHAT-BUG-1809315 is specifically related to generated column optimizations in SQLite.