USN-5615-1

Dashboard / Vulnerabilities / USN-5615-1

USN-5615-1

Summary: sqlite3 vulnerabilities

Details: It was discovered that SQLite incorrectly handled INTERSEC query processing. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-35525) It was discovered that SQLite incorrectly handled ALTER TABLE for views that have a nested FROM clause. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue was only addressed in Ubuntu 20.04 LTS. (CVE-2020-35527) It was discovered that SQLite incorrectly handled embedded null characters when tokenizing certain unicode strings. This issue could result in incorrect results. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-20223)

References: https://ubuntu.com/security/notices/USN-5615-1, https://ubuntu.com/security/CVE-2020-35525, https://ubuntu.com/security/CVE-2020-35527, https://ubuntu.com/security/CVE-2021-20223