CVE-2022-1292

The c_rehash script allows command injection

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).

CVSS 3.1 · 9.8 Critical EPSS 82.6% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 4 more

Products

Debian Linux Fedora A250 and 55 more

CVE-2022-23308

libxml2: Use-after-free of ID and IDREF attributes

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

CVSS 3.1 · 7.5 High EPSS 5.1% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 4 more

Products

Ipados Iphone Os Mac Os X and 43 more

CVE-2021-20227

sqlite: potential use-after-free bug when processing a subquery with both a correlated WHERE clause and a "HAVING 0" clause and where the parent query is an aggregate

A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Oracle Sqlite

Products

Communications Network Charging And Control Enterprise Manager For Oracle Database Jd Edwards Enterpriseone Tools and 4 more

CVE-2021-3537

libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode

A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.9 Medium EPSS 3.6% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 3 more

Products

Debian Linux Fedora Active Iq Unified Manager and 18 more

CVE-2021-3518

libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c

There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.

CVSS 3.1 · 8.8 High EPSS 21.9% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 3 more

Products

Debian Linux Fedora Active Iq Unified Manager and 17 more

CVE-2021-3517

libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

CVSS 3.1 · 8.6 High EPSS 17.0% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 3 more

Products

Debian Linux Fedora Active Iq Unified Manager and 27 more

CVE-2020-24977

libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c

GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

CVSS 3.1 · 6.5 Medium EPSS 3.0% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 4 more

Products

Debian Linux Fedora Active Iq Unified Manager and 17 more

CVE-2020-13871

sqlite: use-after-free in resetAccumulator in select.c

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 3 more

Products

Debian Linux Fedora Cloud Backup and 9 more

CVE-2020-11656

sqlite: use-after-free in the ALTER TABLE implementation

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

CVSS 3.1 · 9.8 Critical EPSS 8.7% KEV · Not listed

Vendors

Netapp Oracle Siemens and 2 more

Products

Ontap Select Deploy Administration Utility Communications Messaging Server Communications Network Charging And Control and 9 more

CVE-2020-9327

sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed

Vendors

Canonical Netapp Oracle and 3 more

Products

Ubuntu Linux Cloud Backup Communications Messaging Server and 9 more

CVE-2020-7595

libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

CVSS 3.1 · 7.5 High EPSS 7.8% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 5 more

Products

Ubuntu Linux Debian Linux Fedora and 32 more

CVE-2020-11655

sqlite: malformed window-function query leads to DoS

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

CVSS 3.1 · 7.5 High EPSS 4.3% KEV · Not listed

Vendors

Canonical Debian Netapp and 4 more

Products

Ubuntu Linux Debian Linux Ontap Select Deploy Administration Utility and 15 more

CVE-2019-20388

libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c

xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed

Vendors

Debian Fedoraproject Netapp and 4 more

Products

Debian Linux Fedora Cloud Backup and 31 more

CVE-2019-20218

sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed

Vendors

Canonical Debian Oracle and 2 more

Products

Ubuntu Linux Debian Linux Mysql Workbench and 2 more

CVE-2019-19926

sqlite: error mishandling because of incomplete fix of CVE-2019-19880

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.

CVSS 3.1 · 7.5 High EPSS 8.0% KEV · Not listed

Vendors

Debian Netapp Opensuse and 5 more

Products

Debian Linux Cloud Backup Backports Sle and 10 more

CVE-2019-19925

sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed

Vendors

Debian Netapp Opensuse and 5 more

Products

Debian Linux Cloud Backup Backports Sle and 11 more

CVE-2019-19924

sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

CVSS 3.1 · 5.3 Medium EPSS 10.7% KEV · Not listed

Vendors

Apache Netapp Oracle and 3 more

Products

Bookkeeper Cloud Backup Mysql Workbench and 3 more

CVE-2019-19923

sqlite: mishandling of certain uses of SELECT DISTINCT involving a LEFT JOIN in flattenSubquery in select.c leads to a NULL pointer dereference

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed

Vendors

Debian Netapp Opensuse and 5 more

Products

Debian Linux Cloud Backup Backports Sle and 11 more

CVE-2019-19880

sqlite: invalid pointer dereference in exprListAppendList in window.c

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.

CVSS 3.1 · 7.5 High EPSS 6.9% KEV · Not listed

Vendors

Debian Netapp Opensuse and 5 more

Products

Debian Linux Cloud Backup Backports Sle and 10 more

CVE-2019-19646

sqlite: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

CVSS 3.1 · 9.8 Critical EPSS 7.4% KEV · Not listed

Vendors

Netapp Oracle Siemens and 2 more

Products

Cloud Backup Ontap Select Deploy Administration Utility Mysql Workbench and 3 more