rpm package
suse/sqlite3&distro=SUSE Studio Onsite 1.3
pkg:rpm/suse/sqlite3&distro=SUSE%20Studio%20Onsite%201.3
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-20346 | — | < 3.7.6.3-1.4.7.3.1 | 3.7.6.3-1.4.7.3.1 | Dec 21, 2018 | SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run a | ||
| CVE-2016-6153 | Med | 5.9 | < 3.7.6.3-1.4.6.1 | 3.7.6.3-1.4.6.1 | Sep 26, 2016 | os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current workin |
- CVE-2018-20346Dec 21, 2018affected < 3.7.6.3-1.4.7.3.1fixed 3.7.6.3-1.4.7.3.1
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run a
- affected < 3.7.6.3-1.4.6.1fixed 3.7.6.3-1.4.6.1
os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current workin