Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cpan

cpan

365 packages · metacpan.org

High Security Advisories for https://github.com/sqlite/sqlite in cpan Clear Filters

High
over 6 years ago

ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind. CPANSA-DBD-SQLite-2019-19959

cpan DBD-SQLite
High
over 6 years ago

selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error. CPANSA-DBD-SQLite-2019-20218

cpan DBD-SQLite
High
over 6 years ago

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results). CPANSA-DBD-SQLite-2019-19923

cpan DBD-SQLite
High
over 6 years ago

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. CPANSA-DBD-SQLite-2019-19925

cpan DBD-SQLite
High
over 6 years ago

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880. CPANSA-DBD-SQLite-2019-19926

cpan DBD-SQLite
High
over 6 years ago

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled. CPANSA-DBD-SQLite-2019-19880

cpan DBD-SQLite
High
over 6 years ago

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash. CPANSA-DBD-SQLite-2019-19603

cpan DBD-SQLite
High
over 6 years ago

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage. CPANSA-DBD-SQLite-2019-19244

cpan DBD-SQLite

Filter by Severity

Moderate 210 High 101 Critical 49 Low 6

Filter by Package

DBD-SQLite 19 perl 9 DBI 4 Archive-Unzip-Burst 3 Mojolicious 3 Net-Dropbear 2 Git-XS 2 Git-Raw 2 Crypt-Perl 2 MT 2 Crypt-JWT 1 Net-OAuth 1 ExtUtils-MakeMaker 1 SOAP-Lite 1 Parallel-ForkManager 1 Compress-Raw-Zlib 1 IPC-Cmd 1 DBIx-Custom 1 Lemonldap-NG-Portal 1 Sereal-Decoder 1 File-Temp 1 Alien-PCRE2 1 Imager 1 Ukigumo-Server 1 Lemonldap-NG-Handler 1 Digest 1 App-japerl 1 Redis-Fast 1 Redis-hiredis 1 IO-Compress 1 Nginx-Engine 1 XML-Atom 1 Archive-Tar 1 Dpkg 1 Module-Load-Conditional 1 Yukki 1 Sys-Syslog 1 Wight-Chart 1 DBD-mysqlPP 1 Nginx-Perl 1 EV-Hiredis 1 Lemonldap-NG-Common 1 Catalyst-Authentication-Store-LDAP 1 Batch-Batchrun 1 CPAN 1 Encode 1 Digest-SHA 1 cppAdaptive2 1 Locale-Maketext 1 Convert-ASN1 1 Perl6-Pugs 1 MarpaX-ESLIF 1 cppAdaptive1 1 Apache-AuthCAS 1 Pod-Perldoc 1 Sereal-Encoder 1 HTML-StripScripts 1 Lemonldap-NG-Manager 1 Module-Provision 1 WWW-ORCID 1 GD 1 Win32-File-Summary 1 App-Netdisco 1

Filter by Repository

https://github.com/sqlite/sqlite 8 https://github.com/Perl/perl5 6 https://github.com/madler/zlib 5 https://github.com/redis/hiredis 3 https://github.com/mojolicious/mojo 3 https://github.com/chartjs/Chart.js 2 https://github.com/FGasper/p5-Crypt-Perl 2 https://github.com/richgel999/miniz 2 https://github.com/Perl-Toolchain-Gang/ExtUtils-MakeMaker 1 https://github.com/perl5-dbi/dbi 1 https://github.com/moxiecode/plupload 1 https://github.com/moment/moment 1 https://github.com/Perl-Toolchain-Gang/File-Temp 1 https://github.com/mkj/dropbear 1 https://github.com/libtom/libtomcrypt 1 https://github.com/libgit2/security 1 https://github.com/josdejong/jsoneditor 1 https://github.com/gbarr/perl-Convert-ASN1 1 https://github.com/yuki-kimoto/DBIx-Custom 1 https://github.com/DCIT/perl-Crypt-JWT 1 https://github.com/dankogai/p5-encode 1 https://github.com/clintongormley/perl-html-stripscripts 1 https://github.com/zhuowei/worthdoingbadly.com 1