Description
SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
Remediation
References
Related Vulnerabilities
Oracle Application Server Other Vulnerability (CVE-2002-0842)
WordPress Plugin Custom Field Template Cross-Site Request Forgery (2.5.1)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-7065)
Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10384)
WordPress Plugin BuddyPress Multiple Vulnerabilities (5.1.2)