CVE-2020-11656

sqlite: use-after-free in the ALTER TABLE implementation

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

CVSS 3.1 · 9.8 Critical EPSS 8.7% KEV · Not listed

Vendors

Netapp Oracle Siemens and 2 more

Products

Ontap Select Deploy Administration Utility Communications Messaging Server Communications Network Charging And Control and 9 more

CVE-2020-9327

sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed

Vendors

Canonical Netapp Oracle and 3 more

Products

Ubuntu Linux Cloud Backup Communications Messaging Server and 9 more

CVE-2020-8286

curl: Inferior OCSP verification

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

CVSS 3.1 · 7.5 High EPSS 4.6% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 6 more

Products

Mac Os X Macos Debian Linux and 19 more

CVE-2020-8285

curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.

CVSS 3.1 · 7.5 High EPSS 9.8% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 7 more

Products

Mac Os X Macos Debian Linux and 29 more

CVE-2020-8284

curl: FTP PASV command response can cause curl to connect to arbitrary host

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.

CVSS 3.1 · 3.7 Low EPSS 3.9% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 7 more

Products

Mac Os X Macos Debian Linux and 28 more

CVE-2020-8177

curl: Incorrect argument check can allow remote servers to overwrite local files

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed

Vendors

Debian Fujitsu Haxx and 3 more

Products

Debian Linux M10-1 M10-1 Firmware and 16 more

CVE-2020-7595

libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

CVSS 3.1 · 7.5 High EPSS 7.8% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 5 more

Products

Ubuntu Linux Debian Linux Fedora and 32 more

CVE-2020-11655

sqlite: malformed window-function query leads to DoS

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

CVSS 3.1 · 7.5 High EPSS 4.3% KEV · Not listed

Vendors

Canonical Debian Netapp and 4 more

Products

Ubuntu Linux Debian Linux Ontap Select Deploy Administration Utility and 15 more

CVE-2019-19956

libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c

xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.

CVSS 3.1 · 7.5 High EPSS 5.6% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 5 more

Products

Ubuntu Linux Debian Linux Fedora and 12 more

CVE-2019-19926

sqlite: error mishandling because of incomplete fix of CVE-2019-19880

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.

CVSS 3.1 · 7.5 High EPSS 8.0% KEV · Not listed

Vendors

Debian Netapp Opensuse and 5 more

Products

Debian Linux Cloud Backup Backports Sle and 10 more

CVE-2019-19925

sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed

Vendors

Debian Netapp Opensuse and 5 more

Products

Debian Linux Cloud Backup Backports Sle and 11 more

CVE-2019-19924

sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

CVSS 3.1 · 5.3 Medium EPSS 10.7% KEV · Not listed

Vendors

Apache Netapp Oracle and 3 more

Products

Bookkeeper Cloud Backup Mysql Workbench and 3 more

CVE-2019-19923

sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed

Vendors

Debian Netapp Opensuse and 5 more

Products

Debian Linux Cloud Backup Backports Sle and 11 more

CVE-2019-19880

sqlite: invalid pointer dereference in exprListAppendList in window.c

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.

CVSS 3.1 · 7.5 High EPSS 6.9% KEV · Not listed

Vendors

Debian Netapp Opensuse and 5 more

Products

Debian Linux Cloud Backup Backports Sle and 10 more

CVE-2019-19646

sqlite: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

CVSS 3.1 · 9.8 Critical EPSS 7.4% KEV · Not listed

Vendors

Netapp Oracle Siemens and 2 more

Products

Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 3 more

CVE-2019-19645

sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Netapp Oracle Siemens and 2 more

Products

Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 3 more

CVE-2019-19603

sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.

CVSS 3.1 · 7.5 High EPSS 11.0% KEV · Not listed

Vendors

Apache Netapp Oracle and 3 more

Products

Guacamole Cloud Backup Ontap Select Deploy Administration Utility and 4 more

CVE-2019-19317

sqlite: omits bits from the colUsed bitmask in the case of a generated column

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

CVSS 3.1 · 9.8 Critical EPSS 4.7% KEV · Not listed

Vendors

Netapp Oracle Siemens and 1 more

Products

Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 2 more

CVE-2019-6111

openssh: Improper validation of object names allows malicious server to overwrite files via scp client

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).

CVSS 3.1 · 5.9 Medium EPSS 58.2% KEV · Not listed

Vendors

Apache Canonical Debian and 7 more

Products

Mina Sshd Ubuntu Linux Debian Linux and 24 more

CVE-2019-6110

openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.

CVSS 3.1 · 6.8 Medium EPSS 24.9% KEV · Not listed

Vendors

Netapp Openbsd Siemens and 1 more

Products

Element Software Ontap Select Deploy Storage Automation Store and 6 more