Vulnerability Description
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sqlite | Sqlite | < 3.25.3 |
| Chrome | < 71.0.3578.80 | |
| Redhat | Linux | 6.0 |
| Debian | Debian Linux | 8.0 |
| Opensuse | Leap | 15.0 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00040.htmlThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.htmlMailing ListThird Party Advisory
- http://www.securityfocus.com/bid/106323Third Party AdvisoryVDB Entry
- https://access.redhat.com/articles/3758321Third Party Advisory
- https://blade.tencent.com/magellan/index_en.htmlThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1659379Issue TrackingThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1659677Issue TrackingThird Party Advisory
- https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.Third Party Advisory
- https://chromium.googlesource.com/chromium/src/+/c368e30ae55600a1c3c9cb1710a54f9Third Party Advisory
- https://crbug.com/900910Permissions RequiredThird Party Advisory
- https://github.com/zhuowei/worthdoingbadly.com/blob/master/_posts/2018-12-14-sqlExploitThird Party Advisory
- https://kc.mcafee.com/corporate/index?page=content&id=SB10365
- https://lists.debian.org/debian-lts-announce/2018/12/msg00012.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
FAQ
What is CVE-2018-20346?
CVE-2018-20346 is a vulnerability with a CVSS score of 8.1 (HIGH). SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowi...
How severe is CVE-2018-20346?
CVE-2018-20346 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-20346?
Check the references section above for vendor advisories and patch information. Affected products include: Sqlite Sqlite, Google Chrome, Redhat Linux, Debian Debian Linux, Opensuse Leap.