Ubuntu Security Notice 5716-2 - USN-5716-1 fixed a vulnerability in SQLite. This update provides the corresponding update for Ubuntu 14.04 ESM. It was discovered that SQLite incorrectly handled certain long string arguments. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
986e6b2ee10a22ae763db675ed7b4953bac6f22f3c34c2273db81ef2e2c915db
=========================================================================
Ubuntu Security Notice USN-5716-2
November 21, 2022
sqlite3 vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 ESM
Summary:
SQLite could be made to crash or run programs if it received specially
crafted input.
Software Description:
- sqlite3: C library that implements an SQL database engine
Details:
USN-5716-1 fixed a vulnerability in SQLite. This update provides
the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that SQLite incorrectly handled certain long string
arguments. An attacker could use this issue to cause SQLite to crash,
resulting in a denial of service, or possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 ESM:
libsqlite3-0 3.8.2-1ubuntu2.2+esm3
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-5716-2
https://ubuntu.com/security/notices/USN-5716-1
CVE-2022-35737