Wind River Support Network

HomeDefectsLIN9-10100
Fixed

LIN9-10100 : Security Advisory - sqlite3 - CVE-2020-15358

Created: Jun 27, 2020    Updated: Apr 22, 2022
Resolved Date: Jul 30, 2020
Found In Version: 9.0.0.1
Fix Version: 9.0.0.26
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

CREATE(Triage):(User=admin) CVE-2020-15358 (https://nvd.nist.gov/vuln/detail/CVE-2020-15358)

CVEs


Live chat
Online