flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 24, 2019 |
| Centos_linux | — | Upgrade sqlite-docUpgrade sqlite-analyzer-debuginfoUpgrade lemonUpgrade sqlite-libsUpgrade chromium-browserUpgrade sqliteUpgrade sqlite-libs-debuginfoUpgrade chromium-browser-debuginfoUpgrade sqlite-debuginfoUpgrade lemon-debuginfoUpgrade sqlite-debugsourceUpgrade sqlite-develUpgrade sqlite-tcl-debuginfo | Feb 18, 2020 | Dec 24, 2019 |
| Debian | — | Upgrade sqlite3Upgrade chromium | Mar 12, 2020 | Dec 24, 2019 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Aug 7, 2020 | Feb 4, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sqliteUpgrade sqlite-devel | Nov 3, 2020 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sqliteUpgrade sqlite-devel | Sep 28, 2020 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sqliteUpgrade sqlite-devel | Feb 24, 2020 | Dec 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqlite-libsUpgrade sqliteUpgrade sqlite-develUpgrade sqlite-doc | Feb 26, 2020 | Dec 24, 2019 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Nov 17, 2021 | Dec 24, 2019 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade database/sqlite-3/documentation to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Dec 24, 2019 |
| Oracle_linux | — | Upgrade sqlite-libsUpgrade sqlite-develUpgrade sqliteUpgrade sqlite-docUpgrade lemon | Oct 5, 2022 | Jan 8, 2020 |
| Redhat_linux | — | Upgrade sqlite-develUpgrade sqlite-analyzer-debuginfoUpgrade sqliteUpgrade sqlite-libsUpgrade lemonUpgrade sqlite-debugsourceUpgrade sqlite-docUpgrade sqlite-debuginfoUpgrade sqlite-tcl-debuginfoUpgrade sqlite-libs-debuginfoUpgrade lemon-debuginfo | Feb 18, 2020 | Dec 24, 2019 |
| Suse | — | Upgrade libsqlite3-0Upgrade libsqlite3-0-32bitUpgrade libre2-0Upgrade chromedriverUpgrade re2-develUpgrade sqlite3Upgrade chromiumUpgrade sqlite3-develUpgrade sqlite3-doc | Feb 12, 2020 | Dec 24, 2019 |
| Ubuntu | — | Upgrade sqlite3Upgrade libsqlite3-0 | Mar 11, 2020 | Dec 24, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub