MITRE https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU4NZ6DDU4BEM3ACM3FM6GLEPX56ZQXK/ [No types assigned]

MITRE https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg113218.html [No types assigned]

MITRE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU4NZ6DDU4BEM3ACM3FM6GLEPX56ZQXK/

MITRE https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg113218.html

https://kc.mcafee.com/corporate/index?page=content&id=SB10365 [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html [No Types Assigned]

https://www.oracle.com/security-alerts/cpuapr2020.html [No Types Assigned]

Multiple issues in SQLite via WebSQL in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.

https://support.apple.com/HT209443 [No Types Assigned]

https://support.apple.com/HT209446 [No Types Assigned]

https://support.apple.com/HT209447 [No Types Assigned]

https://support.apple.com/HT209448 [No Types Assigned]

https://support.apple.com/HT209450 [No Types Assigned]

https://support.apple.com/HT209451 [No Types Assigned]

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.

Multiple issues in SQLite via WebSQL in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU4NZ6DDU4BEM3ACM3FM6GLEPX56ZQXK/ [No Types Assigned]

https://usn.ubuntu.com/4019-2/ [No Types Assigned]

https://usn.ubuntu.com/4019-1/ [No Types Assigned]

OR
     *cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.html Mailing List, Third Party Advisory

https://security.gentoo.org/glsa/201904-21 No Types Assigned

https://security.gentoo.org/glsa/201904-21 Third Party Advisory

https://security.gentoo.org/glsa/201904-21 [No Types Assigned]

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.html [No Types Assigned]

OR
     *cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00040.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00040.html Third Party Advisory

https://lists.debian.org/debian-lts-announce/2018/12/msg00012.html Third Party Advisory

https://lists.debian.org/debian-lts-announce/2018/12/msg00012.html Mailing List, Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00040.html [No Types Assigned]

OR
     *cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* versions up to (excluding) 71.0.3578.80

OR
     *cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:* versions up to (excluding) 3.25.3

OR
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:linux:6.0:*:*:*:*:*:*:*

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190

http://www.securityfocus.com/bid/106323 No Types Assigned

http://www.securityfocus.com/bid/106323 Third Party Advisory, VDB Entry

https://access.redhat.com/articles/3758321 No Types Assigned

https://access.redhat.com/articles/3758321 Third Party Advisory

https://blade.tencent.com/magellan/index_en.html No Types Assigned

https://blade.tencent.com/magellan/index_en.html Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1659379 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=1659379 Issue Tracking, Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1659677 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=1659677 Issue Tracking, Third Party Advisory

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html No Types Assigned

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html Third Party Advisory

https://chromium.googlesource.com/chromium/src/+/c368e30ae55600a1c3c9cb1710a54f9c55de786e No Types Assigned

https://chromium.googlesource.com/chromium/src/+/c368e30ae55600a1c3c9cb1710a54f9c55de786e Third Party Advisory

https://crbug.com/900910 No Types Assigned

https://crbug.com/900910 Permissions Required, Third Party Advisory

https://github.com/zhuowei/worthdoingbadly.com/blob/master/_posts/2018-12-14-sqlitebug.html No Types Assigned

https://github.com/zhuowei/worthdoingbadly.com/blob/master/_posts/2018-12-14-sqlitebug.html Exploit, Third Party Advisory

https://lists.debian.org/debian-lts-announce/2018/12/msg00012.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2018/12/msg00012.html Third Party Advisory

https://news.ycombinator.com/item?id=18685296 No Types Assigned

https://news.ycombinator.com/item?id=18685296 Third Party Advisory

https://sqlite.org/src/info/940f2adc8541a838 No Types Assigned

https://sqlite.org/src/info/940f2adc8541a838 Patch, Third Party Advisory

https://sqlite.org/src/info/d44318f59044162e No Types Assigned

https://sqlite.org/src/info/d44318f59044162e Patch, Third Party Advisory

https://worthdoingbadly.com/sqlitebug/ No Types Assigned

https://worthdoingbadly.com/sqlitebug/ Exploit, Third Party Advisory

https://www.freebsd.org/security/advisories/FreeBSD-EN-19:03.sqlite.asc No Types Assigned

https://www.freebsd.org/security/advisories/FreeBSD-EN-19:03.sqlite.asc Third Party Advisory

https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg113218.html No Types Assigned

https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg113218.html Mailing List, Third Party Advisory

https://www.sqlite.org/releaselog/3_25_3.html No Types Assigned

https://www.sqlite.org/releaselog/3_25_3.html Release Notes, Vendor Advisory

https://www.synology.com/security/advisory/Synology_SA_18_61 No Types Assigned

https://www.synology.com/security/advisory/Synology_SA_18_61 Third Party Advisory

https://www.freebsd.org/security/advisories/FreeBSD-EN-19:03.sqlite.asc [No Types Assigned]

http://www.securityfocus.com/bid/106323 [No Types Assigned]

https://www.synology.com/security/advisory/Synology_SA_18_61 [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2018/12/msg00012.html [No Types Assigned]

https://github.com/zhuowei/worthdoingbadly.com/blob/master/_posts/2018-12-14-sqlitebug.html [No Types Assigned]

https://news.ycombinator.com/item?id=18685296 [No Types Assigned]

https://sqlite.org/src/info/940f2adc8541a838 [No Types Assigned]

https://sqlite.org/src/info/d44318f59044162e [No Types Assigned]

https://worthdoingbadly.com/sqlitebug/ [No Types Assigned]