AVG-1182 log

Package sqlite
Status Fixed
Severity High
Type arbitrary code execution
Affected 3.32.2-1
Fixed 3.32.3-1
Current 3.45.3-1 [core]
Ticket None
Created Mon Jun 8 20:14:23 2020
Issue Severity Remote Type Description
CVE-2020-13871 High No Arbitrary code execution
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
Date Advisory Package Type
28 Jun 2020 ASA-202006-11 sqlite arbitrary code execution
References
https://www.sqlite.org/src/info/c8d3b9f0a750a529