CVE-2018-20346 Integer overflow in n/a

High 8.1 Published 21 Dec 2018 Updated 5 Aug 2024

Remote attackers can execute arbitrary code via integer overflow in SQLite FTS3 shadow tables when the extension is enabled.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2018-20346?

CVE-2018-20346 is a high-severity vulnerability in Debian Debian Linux, published on 21 Dec 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.

Weakness: CWE-190

Which versions are affected by CVE-2018-20346?

It affects 5 products.

Linux distribution packages (7)

`sqlite3` SUSE:Linux Enterprise Module for Basesystem 15	All versions	`3.27.2-3.3.2`
`sqlite3` SUSE:Linux Enterprise Point of Sale 11 SP3	All versions	`3.7.6.3-1.4.7.3.1`
`sqlite3` SUSE:Linux Enterprise Server 11 SP4	All versions	`3.7.6.3-1.4.7.3.1`
`sqlite3` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	All versions	`3.7.6.3-1.4.7.3.1`
`sqlite3` SUSE:Linux Enterprise Software Development Kit 11 SP4	All versions	`3.7.6.3-1.4.7.3.1`
`sqlite3` SUSE:Studio Onsite 1.3	All versions	`3.7.6.3-1.4.7.3.1`
`sqlite3` openSUSE:Leap 15.0	All versions	`3.27.2-lp150.2.3.1`

Products include Debian Debian Linux, Google Chrome, Opensuse Leap, Redhat Linux, Sqlite Sqlite.

How do I fix CVE-2018-20346?

Upgrade to a fixed version.

Is CVE-2018-20346 being exploited?

There is no known exploitation of CVE-2018-20346 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as ALPINE-CVE-2018-20346, AZL-38458, DEBIAN-CVE-2018-20346, GHSA-wpf6-c3rx-7xrj, MGASA-2018-0489, SUSE-SU-2019:0788-1 and 3 more.