Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-20505

Fixed in a distro release EPSS 7%

SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).

Published 2019-04-03 · CVE record · OSV

Products: sqlite, apple iphone_os, apple mac_os_x, apple watchos, apple icloud, apple itunes

Distro releases

ReleasePackageFixed in
Debian 12sqlite33.25.3-1
Debian 13sqlite33.25.3-1
Debian 14sqlite33.25.3-1
Ubuntu 16.04 LTSsqlite33.11.0-1ubuntu1.2
Ubuntu 18.04 LTSsqlite33.22.0-1ubuntu0.1