http://bugzilla.opensuse.org/show_bug.cgi?id=1172091 Bug ID: 1172091 Summary: VUL-0: sqlite3: Segfault in sqlite3ExprCodeTarget Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: max@suse.com Reporter: Andreas.Stieger@gmx.de QA Contact: qa-bugs@suse.de CC: security-team@suse.de Found By: --- Blocker: --- Segfault in sqlite3ExprCodeTarget

From https://www.sqlite.org/releaselog/3_32_1.html

Fix two long-standing bugs that allow malicious SQL statements to crash the process that is running SQLite.

From https://www.sqlite.org/src/info/7a5279a25c57adf1

POC: --- CREATE TABLE a(c UNIQUE); SELECT a.c FROM a JOIN a b ON 3 = a.c NATURAL JOIN a WHERE a.c IN((SELECT(SELECT coalesce(lead(2) OVER(), SUM(c))) FROM a d WHERE a.c));

This might be minor due to the fact that most applications using sqlite will not allow the full SQL statement to be supplied by the user. -- You are receiving this mail because: You are on the CC list for the bug.