Logo
›
›vulnerability›CVE-2018-20346
Name
CVE-2018-20346
Source
NVD ( link)Debian ( link)
Description
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.
CWEs
CWE-190
Published Date
Updated Date
Workaround
-
Advisories
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00040.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.htmlMailing List
http://www.securityfocus.com/bid/106323VDB Entry
https://access.redhat.com/articles/3758321Third Party Advisory
https://blade.tencent.com/magellan/index_en.htmlThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1659379Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1659677Issue Tracking
https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.htmlThird Party Advisory
https://chromium.googlesource.com/chromium/src/+/c368e30ae55600a1c3c9cb1710a54f9c55de786eThird Party Advisory
https://crbug.com/900910Permissions Required
https://github.com/zhuowei/worthdoingbadly.com/blob/master/_posts/2018-12-14-sqlitebug.htmlExploit
https://lists.debian.org/debian-lts-announce/2018/12/msg00012.htmlMailing List
https://news.ycombinator.com/item?id=18685296Third Party Advisory
https://security.gentoo.org/glsa/201904-21Third Party Advisory
https://sqlite.org/src/info/940f2adc8541a838Patch
https://sqlite.org/src/info/d44318f59044162ePatch
https://worthdoingbadly.com/sqlitebug/Exploit
https://www.freebsd.org/security/advisories/FreeBSD-EN-19:03.sqlite.ascThird Party Advisory
https://www.sqlite.org/releaselog/3_25_3.htmlRelease Notes
https://www.synology.com/security/advisory/Synology_SA_18_61Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00040.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.htmlMailing List
http://www.securityfocus.com/bid/106323VDB Entry
https://access.redhat.com/articles/3758321Third Party Advisory
https://blade.tencent.com/magellan/index_en.htmlThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1659379Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1659677Issue Tracking
https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.htmlThird Party Advisory
https://chromium.googlesource.com/chromium/src/+/c368e30ae55600a1c3c9cb1710a54f9c55de786eThird Party Advisory
https://crbug.com/900910Permissions Required
https://github.com/zhuowei/worthdoingbadly.com/blob/master/_posts/2018-12-14-sqlitebug.htmlExploit
https://lists.debian.org/debian-lts-announce/2018/12/msg00012.htmlMailing List
https://news.ycombinator.com/item?id=18685296Third Party Advisory
https://security.gentoo.org/glsa/201904-21Third Party Advisory
https://sqlite.org/src/info/940f2adc8541a838Patch
https://sqlite.org/src/info/d44318f59044162ePatch
https://worthdoingbadly.com/sqlitebug/Exploit
https://www.freebsd.org/security/advisories/FreeBSD-EN-19:03.sqlite.ascThird Party Advisory
https://www.sqlite.org/releaselog/3_25_3.htmlRelease Notes
https://www.synology.com/security/advisory/Synology_SA_18_61Third Party Advisory

Analysis#

Affected Component
Analysis
sqlite
Exploitable

Vulnerability Ratings#

8.1
other
6.8
CVSSv2

Others affected components#

Name
Project
Project Version
Version
Status
sqlite
buildroot
2025.02.x
3.50.4
Not Affected
sqlite
buildroot
master
3.53.2
Not Affected
sqlite3
openwrt
master
3.53.1-r1
Not Affected
sqlite3
openwrt
openwrt-25.12
3.53.1-r1
Not Affected