CVE-2018-8740

Published: Mar 17, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[debian-lts-announce] 20190111 [SECURITY] [DLA 1633-1] sqlite3 security update

mailing-list

https://bugs.launchpad.net/ubuntu/+source/sqlite3/+bug/1756349

103466

vdb-entry

https://www.sqlite.org/cgi/src/vdiff?from=1774f1c3baf0bc3d&to=d75e67654aa9620b

https://www.sqlite.org/cgi/src/timeline?r=corrupt-schema

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6964

openSUSE-SU-2019:1426

vendor-advisory

FEDORA-2019-49f80a78bc

vendor-advisory

USN-4205-1

vendor-advisory

USN-4394-1

vendor-advisory

[debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update

mailing-list

[bookkeeper-issues] 20210628 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8

mailing-list

[bookkeeper-issues] 20210629 [GitHub] [bookkeeper] padma81 opened a new issue #2746: Security Vulnerabilities in CentOS 7 image, Upgrade image to CentOS 8

mailing-list

[debian-lts-announce] 20230522 [SECURITY] [DLA 3431-1] sqlite security update

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-8740

Description

Affected Products

References