Description (CNA)
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://worthdoingbadly.com/sqlitebug/
- https://support.apple.com/HT209446
- https://bugzilla.redhat.com/show_bug.cgi?id=1659379
- https://bugzilla.redhat.com/show_bug.cgi?id=1659677
- https://lists.debian.org/debian-lts-announce/2018/12/msg00012.html
- https://www.synology.com/security/advisory/Synology_SA_18_61
- https://access.redhat.com/articles/3758321
- https://support.apple.com/HT209443
- https://blade.tencent.com/magellan/index_en.html
- https://support.apple.com/HT209451
- https://github.com/zhuowei/worthdoingbadly.com/blob/master/_posts/2018-12-14-sqlitebug.html
- https://news.ycombinator.com/item?id=18685296
- https://support.apple.com/HT209450
- https://sqlite.org/src/info/940f2adc8541a838
- https://support.apple.com/HT209448
- https://chromium.googlesource.com/chromium/src/+/c368e30ae55600a1c3c9cb1710a54f9c55de786e
- https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg113218.html
- http://www.securityfocus.com/bid/106323
- https://crbug.com/900910
- https://sqlite.org/src/info/d44318f59044162e
- https://www.freebsd.org/security/advisories/FreeBSD-EN-19:03.sqlite.asc
- https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
- https://www.sqlite.org/releaselog/3_25_3.html
- https://support.apple.com/HT209447
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.html
- https://security.gentoo.org/glsa/201904-21
- https://usn.ubuntu.com/4019-1/
- https://usn.ubuntu.com/4019-2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU4NZ6DDU4BEM3ACM3FM6GLEPX56ZQXK/
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10365
ADP enrichment
No English description supplied.
- https://worthdoingbadly.com/sqlitebug/
- https://support.apple.com/HT209446
- https://bugzilla.redhat.com/show_bug.cgi?id=1659379
- https://bugzilla.redhat.com/show_bug.cgi?id=1659677
- https://lists.debian.org/debian-lts-announce/2018/12/msg00012.html
- https://www.synology.com/security/advisory/Synology_SA_18_61
- https://access.redhat.com/articles/3758321
- https://support.apple.com/HT209443
- https://blade.tencent.com/magellan/index_en.html
- https://support.apple.com/HT209451
- https://github.com/zhuowei/worthdoingbadly.com/blob/master/_posts/2018-12-14-sqlitebug.html
- https://news.ycombinator.com/item?id=18685296
- https://support.apple.com/HT209450
- https://sqlite.org/src/info/940f2adc8541a838
- https://support.apple.com/HT209448
- https://chromium.googlesource.com/chromium/src/+/c368e30ae55600a1c3c9cb1710a54f9c55de786e
- https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg113218.html
- http://www.securityfocus.com/bid/106323
- https://crbug.com/900910
- https://sqlite.org/src/info/d44318f59044162e
- https://www.freebsd.org/security/advisories/FreeBSD-EN-19:03.sqlite.asc
- https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html
- https://www.sqlite.org/releaselog/3_25_3.html
- https://support.apple.com/HT209447
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00040.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.html
- https://security.gentoo.org/glsa/201904-21
- https://usn.ubuntu.com/4019-1/
- https://usn.ubuntu.com/4019-2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU4NZ6DDU4BEM3ACM3FM6GLEPX56ZQXK/
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10365