CVEvulnerability
CVE-2018-20505
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-04-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-89
Description
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).
Affected configurations
• sqlite sqlite (<= 3.25.2)
• apple iphone os (< 12.1.3)
• apple mac os x (< 10.14.2)
• apple watchos (< 5.1.3)
• apple icloud (< 7.10)
• apple itunes (< 12.9.3)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://seclists.org/fulldisclosure/2019/Jan/62 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jan/64 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jan/66 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jan/67 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jan/68 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jan/69 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/106698 Third Party Advisory, VDB Entry
- https://seclists.org/bugtraq/2019/Jan/28 Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jan/29 Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jan/31 Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jan/32 Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jan/33 Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jan/39 Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190502-0004/ Third Party Advisory
- https://sqlite.org/src/info/1a84668dcfdebaf12415d Exploit, Vendor Advisory
- https://support.apple.com/kb/HT209443 Vendor Advisory
- https://support.apple.com/kb/HT209446 Vendor Advisory
- https://support.apple.com/kb/HT209447 Vendor Advisory
- https://support.apple.com/kb/HT209448 Vendor Advisory
- https://support.apple.com/kb/HT209450 Vendor Advisory
- https://support.apple.com/kb/HT209451 Vendor Advisory
- https://usn.ubuntu.com/4019-1/ usn.ubuntu.com
- http://seclists.org/fulldisclosure/2019/Jan/62 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jan/64 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jan/66 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jan/67 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jan/68 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2019/Jan/69 Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/106698 Third Party Advisory, VDB Entry
- https://seclists.org/bugtraq/2019/Jan/28 Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jan/29 Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jan/31 Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jan/32 Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jan/33 Mailing List, Third Party Advisory
- https://seclists.org/bugtraq/2019/Jan/39 Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190502-0004/ Third Party Advisory
- https://sqlite.org/src/info/1a84668dcfdebaf12415d Exploit, Vendor Advisory
- https://support.apple.com/kb/HT209443 Vendor Advisory
- https://support.apple.com/kb/HT209446 Vendor Advisory
- https://support.apple.com/kb/HT209447 Vendor Advisory
- https://support.apple.com/kb/HT209448 Vendor Advisory
- https://support.apple.com/kb/HT209450 Vendor Advisory
- https://support.apple.com/kb/HT209451 Vendor Advisory
- https://usn.ubuntu.com/4019-1/ usn.ubuntu.com