CVE-2018-20505
Fixed in a distro release EPSS 7%
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).
Products: sqlite, apple iphone_os, apple mac_os_x, apple watchos, apple icloud, apple itunes
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sqlite3 | 3.25.3-1 |
| Debian 13 | sqlite3 | 3.25.3-1 |
| Debian 14 | sqlite3 | 3.25.3-1 |
| Ubuntu 16.04 LTS | sqlite3 | 3.11.0-1ubuntu1.2 |
| Ubuntu 18.04 LTS | sqlite3 | 3.22.0-1ubuntu0.1 |