Sqlite vulnerabilities, page 3
67 vulnerabilities
Known vulnerabilities in Sqlite products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
CVE-2022-46908chainguardsqlite+38
EPSS score0.45%
SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.CVE-2022-35737alpinesqlite+21EPSS score23.25%
SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.CVE-2017-13685debiansqlite3+2EPSS score1.82%
The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.CVE-2017-10989alpinesqlite+3EPSS score8.61%
The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.CVE-2017-15286alpinesqlite+3EPSS score2.90%
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.CVE-2024-0232debiansqlite3+5EPSS score0.38%
A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.CVE-2019-16168alpinesqlite+36EPSS score4.25%
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."CVE-2019-19646netappcloud_backup+5EPSS score7.40%
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.CVE-2019-19317netappcloud_backup+4EPSS score4.67%
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.CVE-2019-19880debianchromium+13EPSS score6.94%
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.CVE-2019-19925debianchromium+13EPSS score6.81%
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.CVE-2019-19244alpinesqlite+5EPSS score3.56%
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.CVE-2019-19645debiansqlite3+7EPSS score0.57%
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.CVE-2019-19923debianchromium+13EPSS score6.81%
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).CVE-2019-19959canonicalubuntu_linux+3EPSS score3.42%
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.CVE-2019-19924apachebookkeeper+5EPSS score10.75%
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.CVE-2019-19242alpinesqlite+6EPSS score2.71%
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.CVE-2019-19603apacheguacamole+7EPSS score10.98%
SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.CVE-2019-19926debianchromium+12EPSS score8.02%
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.CVE-2019-20218canonicalubuntu_linux+7EPSS score3.74%
selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.