CVE-2018-8740
sqlite3: In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL po...
CVE-2018-8740 is fixed in 4 products on 1 platform, first by lemon 3.22.0-1ubuntu0.4, released May 27, 2020. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0797
94th percentile
In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| lemon · Ubuntu 18.04.6 LTS (bionic) | 3.22.0-1ubuntu0.4 | lemon 3.22.0-1ubuntu0.4 | May 27, 2020 |
| libsqlite3-0 · Ubuntu 18.04.6 LTS (bionic) | 3.22.0-1ubuntu0.4 | libsqlite3-0 3.22.0-1ubuntu0.4 | May 27, 2020 |
| libsqlite3-tcl · Ubuntu 18.04.6 LTS (bionic) | 3.22.0-1ubuntu0.4 | libsqlite3-tcl 3.22.0-1ubuntu0.4 | May 27, 2020 |
| sqlite3 · Ubuntu 18.04.6 LTS (bionic) | 3.22.0-1ubuntu0.4 | sqlite3 3.22.0-1ubuntu0.4 | May 27, 2020 |