CVE-2018-20505

sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)

Published Apr 3, 2019 CVSS 3.0 · 7.5 High EPSS 6.9% KEV · Not listed
Description
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2018-13059 SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).
Ubuntu USN Ubuntu USN USN-4019-1 SQLite vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 12:05 PM
Reserved
Dec 26, 2018, 12:00 AM
Status
Modified
Published
Apr 3, 2019, 6:29 PM
Modified
Jun 17, 2026, 1:52 AM
Severity
Important
Public date
Dec 4, 2018, 12:00 AM