Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-5018 →
DEBIAN-CVE-2019-5018
An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this vulnerability.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
sqlite3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.27.2-3"}]}]
Debian:13
sqlite3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.27.2-3"}]}]
Debian:14
sqlite3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.27.2-3"}]}]
Références
- advisory security-tracker.debian.org