B&R Automation Studio Update of SQLite version
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products, the identified vulnerabilities could present potential attack vectors that might enable unauthorized access, data exposure, or remote code execution.
describes (25)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-6965US | high7.7 | Exploit | ||
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corrupti… | ||||
| CVE-2025-3277US | critical9.8 | — | ||
An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting s… | ||||
| CVE-2023-7104US | high7.3 | — | ||
A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of t… | ||||
| CVE-2022-35737US | high7.5 | Exploit | ||
SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. | ||||
| CVE-2020-15358US | medium5.5 | — | ||
In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant pro… | ||||
| CVE-2020-13632US | medium5.5 | — | ||
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. | ||||
| CVE-2020-13631US | medium5.5 | — | ||
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. | ||||
| CVE-2020-13630US | high7.0 | — | ||
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. | ||||
| CVE-2020-13435US | medium5.5 | — | ||
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. | ||||
| CVE-2020-13434US | medium5.5 | — | ||
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. | ||||
| CVE-2020-11656US | critical9.8 | — | ||
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement. | ||||
| CVE-2020-11655US | high7.5 | — | ||
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishan… | ||||
| CVE-2019-19646US | critical9.8 | — | ||
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. | ||||
| CVE-2019-19645US | medium5.5 | — | ||
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements. | ||||
| CVE-2019-8457US | critical9.8 | — | ||
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables. | ||||
| CVE-2018-20506US | high8.1 | — | ||
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after c… | ||||
| CVE-2018-20505US | high7.5 | — | ||
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to r… | ||||
| CVE-2018-20346US | high8.1 | — | ||
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 s… | ||||
| CVE-2018-8740US | high7.5 | — | ||
In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c. | ||||
| CVE-2017-10989US | critical9.8 | — | ||
The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a he… | ||||
references
External citations — patches, advisories, analysis.
remediations (50)
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- MitigationAutomation Studio
Refer to section “General security recommendations” for advice on how to keep your system secure.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
- FixedAutomation Studio
The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan