RHSA-2020:4442MediumCVSS 8.1

Red Hat Security Advisory: sqlite security update

Published
November 4, 2020
Last Modified
October 14, 2026

🔗 CVE IDs covered (8)

CVE-2020-13632 →CVE-2019-5018 →CVE-2019-16168 →CVE-2019-20218 →CVE-2020-6405 →CVE-2020-9327 →CVE-2020-13630 →CVE-2020-13631 →

📋 Description

CVE-2019-5018 — sqlite: Use-after-free in window function leading to remote code execution CVE-2019-16168 — sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c CVE-2019-20218 — sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error CVE-2020-6405 — sqlite: Out-of-bounds read in SELECT with ON/USING clause CVE-2020-9327 — sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations CVE-2020-13630 — sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c CVE-2020-13631 — sqlite: Virtual table can be renamed into the name of one of its shadow tables CVE-2020-13632 — sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query

🎯 Affected products77

  • Red Hat Enterprise Linux AppStream (v. 8)
  • Red Hat Enterprise Linux BaseOS (v. 8)
  • lemon-0:3.26.0-11.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • lemon-0:3.26.0-11.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • lemon-0:3.26.0-11.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • lemon-0:3.26.0-11.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • lemon-debuginfo-0:3.26.0-11.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • lemon-debuginfo-0:3.26.0-11.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • lemon-debuginfo-0:3.26.0-11.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • lemon-debuginfo-0:3.26.0-11.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • lemon-debuginfo-0:3.26.0-11.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • lemon-debuginfo-0:3.26.0-11.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • lemon-debuginfo-0:3.26.0-11.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • lemon-debuginfo-0:3.26.0-11.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • lemon-debuginfo-0:3.26.0-11.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-0:3.26.0-11.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-0:3.26.0-11.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-0:3.26.0-11.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-0:3.26.0-11.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-0:3.26.0-11.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-0:3.26.0-11.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-analyzer-debuginfo-0:3.26.0-11.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • sqlite-analyzer-debuginfo-0:3.26.0-11.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-analyzer-debuginfo-0:3.26.0-11.el8.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-analyzer-debuginfo-0:3.26.0-11.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • sqlite-analyzer-debuginfo-0:3.26.0-11.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-analyzer-debuginfo-0:3.26.0-11.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • sqlite-analyzer-debuginfo-0:3.26.0-11.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • sqlite-analyzer-debuginfo-0:3.26.0-11.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)
  • sqlite-analyzer-debuginfo-0:3.26.0-11.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)
  • +47 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: An user can mitigate the risk of this vulnerability by: 1) Avoid using ANALYZE command on queries; 2) Disabling the PRAGMA optimize for affected SQLite instances;

🔗 References (12)