Threats affecting pkg:github/sqlite/sqlite

SQLite command-line shell versions through 3.54.1 have a command injection vulnerability in the .recover command. This flaw allows attackers to craft a database schema containing malicious dot-commands such as .shell or .system, which are emitted verbatim by the .recover command. When a victim pipes the output of .recover into sqlite3, these commands execute arbitrary OS commands.

SQLite versions prior to 3.54.0 have a stack exhaustion vulnerability in the countOfViewOptimization() function. This flaw can be triggered by executing a count(*) query over a large multi-row VALUES clause or by supplying a crafted view with deeply nested TK_PLUS expressions. The recursive freeing of these expressions in sqlite3ExprDeleteNN() exhausts the C stack, leading to a denial of service by crashing the host process.