Upstream information

CVE-2018-20505 at MITRE

Description

SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).

SUSE information

SUSE Bugzilla entry: 1131560 [RESOLVED / FIXED]

No SUSE Security Announcements cross referenced.