Note:
This project will be discontinued after December 13, 2021. [more]
2019-11-27
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.
| Products | Ubuntu_linux, Mysql_workbench, Enterprise_linux, Sinec_infrastructure_network_services, Sqlite |
| Type | NULL Pointer Dereference (CWE-476) |
| First patch | - None (likely due to unavailable code) |
| Patches | https://github.com/sqlite/sqlite/commit/57f7ece78410a8aae86aa4625fb7556897db384c |
| Links |
• https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
• https://usn.ubuntu.com/4205-1/ • https://www.oracle.com/security-alerts/cpuapr2020.html |