In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "8.1"
},
{
"introduced": "0"
},
{
"last_affected": "8.0.22"
}
]
}[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "20.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.21"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "11.0.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.14.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.0.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.0.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "12.4.0.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "11.1.2.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.5.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.5.5"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.1.1"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15358.json"