Search for packages
Package details: pkg:deb/ubuntu/sqlite3@3.31.1-4ubuntu0.1
purl pkg:deb/ubuntu/sqlite3@3.31.1-4ubuntu0.1
Next non-vulnerable version 3.31.1-4ubuntu0.2
Latest non-vulnerable version 3.31.1-4ubuntu0.2
Risk 3.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-xevh-jde9-aaak
Aliases:
CVE-2020-15358
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
3.31.1-4ubuntu0.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (6)
Vulnerability Summary Aliases
VCID-4pf6-reg9-aaab SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. CVE-2020-13434
VCID-5n57-agr1-aaah ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. CVE-2020-13632
VCID-cfnz-66fy-aaak SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. CVE-2020-13631
VCID-ptpe-j7h1-aaah ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. CVE-2020-13630
VCID-rcwn-cr9h-aaab SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. CVE-2020-13435
VCID-vx1u-ujaf-aaaf SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled. CVE-2020-11655

Date Actor Action Vulnerability Source VulnerableCode Version