CVE-2018-20506
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and...
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
- Record
CVE-2018-20506- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
- Record
CVE-2018-20506- Updated
- 2026-11-02
EUVDEUVD-2018-13060 No score
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
- Record
EUVD-2018-13060- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hfxx-8v8g-6rcx
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and...
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
- Record
GHSA-hfxx-8v8g-6rcx- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVAZL-38485
CVE-2018-20506 affecting package ceph for versions less than 18.2.1-1
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
- Record
AZL-38485- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
- Record
CVE-2018-20506- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2018-20506
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
- Record
DEBIAN-CVE-2018-20506- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-20506
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.
- Record
UBUNTU-CVE-2018-20506- CVSS 3.0
- 8.1 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVSUSE-SU-2019:0913-1 No score
Security update for sqlite3
This update for sqlite3 fixes the following issues:
Security issues fixed:
- CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 (Magellan) (bsc#1119687).
- CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled (bsc#1131576).
- Record
SUSE-SU-2019:0913-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:0973-1 No score
Security update for sqlite3
This update for sqlite3 fixes the following issues:
Security issues fixed:
- CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled (bsc#1131576).
- CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 (Magellan) (bsc#1119687).
- CVE-2016-6153: Fixed incorrect permissions when creating temporary files (bsc#987394).
- Record
SUSE-SU-2019:0973-1- Updated
- 2026-11-02
OSVUSN-4019-1 No score
sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-2518, CVE-2017-2520)
It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-20505)
It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-20346, CVE-2018-20506)
It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive information. (CVE-2019-8457)
It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2019-9936)
It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2019-9937)
It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-6153)
It was discovered that SQLite incorrectly handled certain databases. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-10989)
It was discovered that SQLite incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-13685)
It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-2519)
- Record
USN-4019-1- Updated
- 2026-11-02
OSVUSN-4019-2 No score
sqlite3 vulnerabilities
USN-4019-1 fixed several vulnerabilities in sqlite3. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM.
Original advisory details:
It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2017-2518)
It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code. (CVE-2018-20346, CVE-2018-20506)
It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive information. (CVE-2019-8457)
It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-6153)
It was discovered that SQLite incorrectly handled certain databases. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 14.04 LTS. (CVE-2017-10989)
It was discovered that SQLite incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-13685)
- Record
USN-4019-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cephAzure Linux:3 |
before 18.2.1-1 | 18.2.1-1 |
sqlite3Debian:12 |
before 3.25.3-1 | 3.25.3-1 |
sqlite3Debian:13 |
before 3.25.3-1 | 3.25.3-1 |
sqlite3Debian:14 |
before 3.25.3-1 | 3.25.3-1 |
sqlite3Debian:8 From an advisory covering 2 CVEs |
before 3.8.7.1-1+deb8u3, plus listed versions 3.8.7.1-13.8.7.1-1+deb8u13.8.7.1-1+deb8u2 |
3.8.7.1-1+deb8u3 |
sqlite3Debian:9 From an advisory covering 12 CVEs |
before 3.16.2-5+deb9u2, plus listed versions 3.16.2-53.16.2-5+deb9u1 |
3.16.2-5+deb9u2 |
sqlite3SUSE:OpenStack Cloud 7 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Desktop 12 SP3 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
sqlite3SUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Software Development Kit 12 SP3 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Server 12 SP3 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Server 12 SP4 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Enterprise Storage 4 From an advisory covering 2 CVEs |
before 3.8.10.2-9.3.1 | 3.8.10.2-9.3.1 |
sqlite3SUSE:Linux Enterprise Server 12-LTSS From an advisory covering 3 CVEs |
before 3.8.3.1-2.7.1 | 3.8.3.1-2.7.1 |
sqlite3Ubuntu:Pro:14.04:LTS |
before 3.8.2-1ubuntu2.2+esm1, plus listed versions 3.7.17-1ubuntu13.8.0.2-1ubuntu13.8.1-1ubuntu13.8.1-1ubuntu33.8.2-1ubuntu13.8.2-1ubuntu23.8.2-1ubuntu2.13.8.2-1ubuntu2.2 |
3.8.2-1ubuntu2.2+esm1 |
sqlite3Ubuntu:16.04:LTS |
before 3.11.0-1ubuntu1.2, plus listed versions 3.8.11.1-13.9.1-23.9.2-13.10.0-13.10.1-13.10.2-13.11.0-1ubuntu13.11.0-1ubuntu1.1 |
3.11.0-1ubuntu1.2 |
sqlite3Ubuntu:18.04:LTS |
before 3.22.0-1ubuntu0.1, plus listed versions 3.19.3-33.20.1-23.21.0-13.22.0-1 |
3.22.0-1ubuntu0.1 |
sqlite3Ubuntu:16.04:LTS From an advisory covering 12 CVEs |
before 3.11.0-1ubuntu1.2, plus listed versions 3.8.11.1-13.9.1-23.9.2-13.10.0-13.10.1-13.10.2-13.11.0-1ubuntu13.11.0-1ubuntu1.1 |
3.11.0-1ubuntu1.2 |
sqlite3Ubuntu:18.04:LTS From an advisory covering 12 CVEs |
before 3.22.0-1ubuntu0.1, plus listed versions 3.19.3-33.20.1-23.21.0-13.22.0-1 |
3.22.0-1ubuntu0.1 |
sqlite3Ubuntu:Pro:14.04:LTS From an advisory covering 7 CVEs |
before 3.8.2-1ubuntu2.2+esm1, plus listed versions 3.7.17-1ubuntu13.8.0.2-1ubuntu13.8.1-1ubuntu13.8.1-1ubuntu33.8.2-1ubuntu13.8.2-1ubuntu23.8.2-1ubuntu2.13.8.2-1ubuntu2.2 |
3.8.2-1ubuntu2.2+esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-20506 is a high vulnerability (CVSS 8.1) in Sqlite, published December 22, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.50%, the 94th percentile. Fixed in ceph 18.2.1-1.
References
sqlite.org/src/info/940f2adc8541a838
seclists.org/fulldisclosure/2019/Jan/62
Show 47 moreShow less
securityfocus.com/bid/106698
support.apple.com/kb/HT209443
lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.html
security.netapp.com/advisory/ntap-20190502-0004
usn.ubuntu.com/4019-1
oracle.com/security-alerts/cpuapr2020.html
lists.debian.org/debian-lts-announce/2020/08/msg00037.html
kc.mcafee.com/corporate/index?page=content&id=SB10365
nvd.nist.gov/vuln/detail/CVE-2018-20506
github.com/advisories/GHSA-hfxx-8v8g-6rcx
security-tracker.debian.org/tracker/CVE-2018-20506
suse.com/support/update/announcement/2019/suse-su-20190913-1
bugzilla.suse.com/1119687
ubuntu.com/security/CVE-2018-20506
cve.org/CVERecord?id=CVE-2018-20506