Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM9B2E29CFC16D0A13A1C26D31DF80C3CBE173218EF57A58CB8B889E51CADFDFE3
HistoryApr 26, 2019 - 7:50 a.m.

Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2018-20346)

2019-04-2607:50:01
www.ibm.com
10

0.9 High

EPSS

Percentile

98.8%

JSON

Summary

SQLite could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow when the FTS3 extension is enabled. By using specially-crafted SQL statements, an attacker could exploit this vulnerability to execute

Vulnerability Details

CVEID: CVE-2018-20346 DESCRIPTION: SQLite could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow when the FTS3 extension is enabled. By using specially-crafted SQL statements, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Base Score: 9.8
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/154623&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

IBM Cloud Application Performance Management, Advanced Private V8.1.4
IBM Cloud Application Performance Management V8.1.4
IBM Performance Management V8.1.3
IBM Tivoli Composite Application Manager (ITCAM) for Transactions: Version 7.4.0.1
IBM Tivoli Composite Application Manager (ITCAM) for Transactions: Version 7.4.0.2

Remediation/Fixes

Product Product Version APAR Remediation / First Fix
IBM Cloud Application Performance Management - Response Time Monitoring Agent 8.1.4 If you use the Response Time Monitoring Agent, the vulnerabilities can be remediated by applying the Response Time Monitoring Agent 8.1.4.0-IBM-APM-RT-AGENT-IF0005 patch to all systems where this agent is installed:
http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FIBM+Application+Performance+Management+Advanced&amp;fixids=8.1.4.0-IBM-APM-RT-AGENT-IF0005&amp;source=SAR
IBM Performance Management - Response Time Monitoring Agent 8.1.3 If you use the Response Time Monitoring Agent, the vulnerabilities can be remediated by applying the Response Time Monitoring Agent 8.1.3.0-IBM-IPM-RT-AGENT-IF0005 patch to all systems where this agent is installed:
http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FIBM+Application+Performance+Management+Advanced&amp;fixids=8.1.3.0-IBM-IPM-RT-AGENT-IF0005&amp;source=SAR
IBM Tivoli Composite Application Manager for Transactions (Response Time) 7.4.0.1 7.4.0.1-TIV-CAMRT-IF0036
http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FTivoli+Composite+Application+Manager+for+Transactions&amp;fixids=7.4.0.1-TIV-CAMRT-IF0036&amp;source=SAR
IBM Tivoli Composite Application Manager for Transactions (Response Time) 7.4.0.2 7.4.0.2-TIV-CAMRT-IF0005
http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FTivoli+Composite+Application+Manager+for+Transactions&amp;fixids=7.4.0.2-TIV-CAMRT-IF0005&amp;source=SAR

Related

openvas 22
nessus 20
cbl_mariner 1
cvelist 2
ibm 5
gentoo 1
osv 4
alpinelinux 1
debiancve 2
cve 2
checkpoint_advisories 1
debian 2
mageia 1
veracode 1
ubuntucve 2
suse 2
prion 2
nvd 2
redhatcve 3
threatpost 2
fedora 1
ubuntu 2
photon 5
kaspersky 2
apple 12
cloudfoundry 1
rosalinux 1
kitploit 1
oracle 2
openvas
openvas
openSUSE: Security Advisory for sqlite3 (openSUSE-SU-2019:1159-1)
2019-04-06 00:00:00
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2019-1870)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2019-1152)
2020-01-23 00:00:00
nessus
nessus
EulerOS 2.0 SP5 : sqlite (EulerOS-SA-2019-1152)
2019-04-02 00:00:00
GLSA-201904-21 : SQLite: Remote code execution
2019-04-23 00:00:00
EulerOS Virtualization for ARM 64 3.0.1.0 : sqlite (EulerOS-SA-2019-1410)
2019-05-14 00:00:00
cbl_mariner
cbl_mariner
CVE-2018-20346 affecting package ceph for versions less than 18.2.1-1
2024-04-17 22:02:46
cvelist
cvelist
CVE-2018-20346
2018-12-21 21:00:00
CVE-2018-20506
2019-04-03 17:50:54
ibm
ibm
Security Bulletin: Public disclosed vulnerability from SQLite CVE-2018-20346
2019-05-10 14:33:22
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerability in SQLite (CVE-2018-20346)
2020-01-10 21:20:26
Security Bulletin: Guardium StealthBits Integration is affected by an SQLite vulnerability
2019-06-26 19:15:01
gentoo
gentoo
SQLite: Remote code execution
2019-04-22 00:00:00
osv
osv
CVE-2018-20346
2018-12-21 21:29:00
sqlite3 - security update
2018-12-22 00:00:00
sqlite3 - security update
2020-08-22 00:00:00
alpinelinux
alpinelinux
CVE-2018-20346
2018-12-21 21:29:00
debiancve
debiancve
CVE-2018-20346
2018-12-21 21:29:00
CVE-2018-20506
2019-04-03 18:29:01
cve
cve
CVE-2018-20346
2018-12-21 21:29:00
CVE-2018-20506
2019-04-03 18:29:01
checkpoint_advisories
checkpoint_advisories
SQLite FTS Integer Overflow (CVE-2018-20346)
2019-01-15 00:00:00
debian
debian
[SECURITY] [DLA 1613-1] sqlite3 security update
2018-12-22 00:38:40
[SECURITY] [DLA 2340-1] sqlite3 security update
2020-08-22 22:34:41
mageia
mageia
Updated sqlite3 packages fix security vulnerability
2018-12-27 02:08:41
veracode
veracode
Arbitrary Code Execution
2020-12-06 04:38:06
ubuntucve
ubuntucve
CVE-2018-20346
2018-12-21 00:00:00
CVE-2018-20506
2019-04-03 00:00:00
suse
suse
Security update for sqlite3 (moderate)
2019-04-05 00:00:00
Security update for sqlite3 (moderate)
2019-04-17 00:00:00
prion
prion
Integer overflow
2018-12-21 21:29:00
Integer overflow
2019-04-03 18:29:00
nvd
nvd
CVE-2018-20346
2018-12-21 21:29:00
CVE-2018-20506
2019-04-03 18:29:01
redhatcve
redhatcve
CVE-2018-20506
2019-05-17 04:22:11
CVE-2018-20505
2019-05-17 04:22:36
CVE-2018-20346
2019-01-03 06:49:37
threatpost
threatpost
DEF CON 2019: Researchers Demo Hacking Google Home for RCE
2019-08-09 15:47:32
Google Chrome Affected By Magellan 2.0 Flaws
2019-12-27 16:45:20
fedora
fedora
[SECURITY] Fedora 29 Update: mingw-sqlite-3.26.0.0-1.fc29
2019-08-13 01:59:18
ubuntu
ubuntu
SQLite vulnerabilities
2019-06-19 00:00:00
SQLite vulnerabilities
2019-06-19 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2019-0132
2019-02-21 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0209
2019-02-20 00:00:00
Critical Photon OS Security Update - PHSA-2019-0209
2019-02-20 00:00:00
kaspersky
kaspersky
KLA11409 Multiple vulnerabilities in Apple iCloud
2019-02-11 00:00:00
KLA11408 Multiple vulnerabilities in Apple iTunes
2019-01-24 00:00:00
apple
apple
About the security content of iCloud for Windows 7.10
2019-01-22 00:00:00
About the security content of iCloud for Windows 7.10 - Apple Support
2019-09-11 09:12:20
About the security content of iTunes 12.9.3 for Windows
2019-01-24 00:00:00
cloudfoundry
cloudfoundry
USN-4019-1: SQLite vulnerabilities | Cloud Foundry
2019-07-10 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1975
2021-07-02 18:09:04
kitploit
kitploit
Trivy - A Simple And Comprehensive Vulnerability Scanner For Containers, Suitable For CI
2019-11-05 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00

0.9 High

EPSS

Percentile

98.8%

JSON
Related for 9B2E29CFC16D0A13A1C26D31DF80C3CBE173218EF57A58CB8B889E51CADFDFE3
openvas22nessus20cbl_mariner1cvelist2ibm5gentoo1osv4alpinelinux1debiancve2cve2checkpoint_advisories1debian2mageia1veracode1ubuntucve2suse2prion2nvd2redhatcve3threatpost2fedora1ubuntu2photon5kaspersky2apple12cloudfoundry1rosalinux1kitploit1oracle2