SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.
Fix
Patch, vendor advisory and mitigation references on NVD 6
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf Patch, Third Party Advisory
- https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3 Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf Patch, Third Party Advisory
- https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3 Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.3 · sqlite, siemens, apacheNVD modified 2026-10-14 08:16
Affected (CPE criteria) 5
cpe:2.3:a:sqlite:sqlite:3.30.1:*:*:*:*:*:*:*cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*cpe:2.3:a:apache:bookkeeper:4.12.1:*:*:*:*:*:*:*cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
References 16
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf Patch, Third Party Advisory
- https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3 Patch, Third Party Advisory
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
- https://security.netapp.com/advisory/ntap-20200114-0003/ Third Party Advisory
- https://usn.ubuntu.com/4298-1/ Broken Link
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf Patch, Third Party Advisory
- https://github.com/sqlite/sqlite/commit/8654186b0236d556aa85528c2573ee0b6ab71be3 Patch, Third Party Advisory
- https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
- https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
- https://security.netapp.com/advisory/ntap-20200114-0003/ Third Party Advisory
- https://usn.ubuntu.com/4298-1/ Broken Link
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html