PT-2018-3489

CVE-2018-8740

·

Publicado

2018-03-16

·

Atualizado

2024-06-15

Descrição por

CVSS 2.0
7.8
Alta
MétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.22.0
Description: The issue is related to a NULL pointer dereference in the SQLite database management system. It occurs when a database's schema is corrupted using a CREATE TABLE AS statement, specifically involving the build.c and prepare.c components. This could potentially allow a remote attacker to cause a denial of service.
Recommendations: For SQLite versions prior to 3.22.0, update to version 3.22.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the CREATE TABLE AS statement until a patch is available.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ALT-PU-2018-2285
DLA-1633-1
DLA-2340-1
DLA-3431-1
MGASA-2018-0181
MGASA-2023-0208
OPENSUSE-SU-2019_1426-1
OPENSUSE-SU-2024:11400-1
SUSE-SU-2019:1208-1
SUSE-SU-2019:1522-1
SUSE-SU-2021:3215-1
USN-4205-1
USN-4394-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾