Sqlite NULL Pointer Dereference Vulnerability (CVE-2017-15286)

Description

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.

Remediation

References

CVE-2017-15286

Related Vulnerabilities

Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2020-1967)

WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Arbitrary File Upload (3.4.4)

Oracle Database Server CVE-2012-0072 Vulnerability (CVE-2012-0072)

WordPress Plugin Multisite Post Duplicator Cross-Site Request Forgery (0.9.5.1)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-26266)

Severity

High

Classification

CVE-2017-15286 CWE-476 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H