Home

CVE-2019-20218

Description

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.402

Associated Vulnerability

VulnerabilityOS Platform
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.11.0-1ubuntu1.4_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.11.0-1ubuntu1.4_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.22.0-1ubuntu0.3_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.22.0-1ubuntu0.3_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.29.0-2ubuntu0.2_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.29.0-2ubuntu0.2_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.11.0-1ubuntu1.4_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.11.0-1ubuntu1.4_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.22.0-1ubuntu0.3_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.22.0-1ubuntu0.3_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.29.0-2ubuntu0.2_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.29.0-2ubuntu0.2_amd64.debLinux
(RHSA-2020:4442) sqlite security update lemon-3.26.0-11.el8.x86_64.rpmLinux
(RHSA-2020:4442) sqlite security update sqlite-3.26.0-11.el8.i686.rpmLinux
(RHSA-2020:4442) sqlite security update sqlite-3.26.0-11.el8.x86_64.rpmLinux
(RHSA-2020:4442) sqlite security update sqlite-debugsource-3.26.0-11.el8.i686.rpmLinux
(RHSA-2020:4442) sqlite security update sqlite-debugsource-3.26.0-11.el8.x86_64.rpmLinux
(RHSA-2020:4442) sqlite security update sqlite-devel-3.26.0-11.el8.i686.rpmLinux
(RHSA-2020:4442) sqlite security update sqlite-devel-3.26.0-11.el8.x86_64.rpmLinux
(RHSA-2020:4442) sqlite security update sqlite-doc-3.26.0-11.el8.noarch.rpmLinux
(RHSA-2020:4442) sqlite security update sqlite-libs-3.26.0-11.el8.i686.rpmLinux
(RHSA-2020:4442) sqlite security update sqlite-libs-3.26.0-11.el8.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234