SB2019120211 - Multiple vulnerabilities in SQLite

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Input validation error (CVE-ID: CVE-2019-19242)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation within the sqlite3ExprCodeTarget(0 function in expr.c when processing the TK_COLUMN case. A remote attacker can pass specially crafted data to the application and perform a denial of service attack.

2) Input validation error (CVE-ID: CVE-2019-19244)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input when a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage in select.c . A remote attacker can crash the affected application using a specially crafted SQL query.

Remediation

Install update from vendor's website.

References

• https://github.com/sqlite/sqlite/commit/57f7ece78410a8aae86aa4625fb7556897db384c
• https://github.com/sqlite/sqlite/commit/e59c562b3f6894f84c715772c4b116d7b5c01348