/ 
DBD-SQLite-1.62
River stage four • 518 direct dependents • 1146 total dependents
⭐ Starred 28 GitHub stars
Security Advisories (13)
CVE-2020-13434 (2020-05-24)

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

CVE-2020-11656 (2020-04-09)

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

CVE-2020-9327 (2020-02-21)

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

CVE-2019-5018 (2019-05-10)

An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0. A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote code execution. An attacker can send a malicious SQL command to trigger this vulnerability.

CVE-2020-13630 (2020-05-27)

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

CVE-2019-8457 (2019-05-30)

SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.

CVE-2020-15358 (2020-06-27)

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

CVE-2020-13632 (2020-05-27)

ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

CVE-2020-13631 (2020-05-27)

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

CVE-2020-13435 (2020-05-24)

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.

CVE-2020-11655 (2020-04-09)

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

CVE-2019-19646 (2019-12-09)

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

CVE-2019-19645 (2019-12-09)

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

Changes for version 1.62 - 2018-12-29

  • Switched to a production version

Changes for version 1.61_04 - 2018-12-22

  • Added sqlite_db_config method and new constants for it
  • Added sqlite_defensive option to disallow dangerous SQLite features
  • Exposed some of the hidden extended result codes

Changes for version 1.61_03 - 2018-12-19

  • Upgraded SQLite to 3.26.0, which reportedly has a security fix

Changes for version 1.61_02 - 2018-12-01

  • Added sqlite_backup_from_dbh/sqlite_backup_to_dbh methods
  • Introduced sqlite_prefer_numeric_type database handle attribute that changes the value of TYPE statement handle attribute from an array of string to an array of integer, as an experimental feature. Setting this may break your applications.
  • Changed preferred bugtracker

Changes for version 1.61_01 - 2018-12-01

  • Added ability to configure SQLITE_MAX_LENGT with environmental variable (Roy Storey)
  • Added sqlite_limit database handle method to change run-time limits
  • Upgraded SQLite to 3.25.3
  • Updated constants

Documentation

DBD::SQLite::Cookbook
The DBD::SQLite Cookbook
DBD::SQLite::Fulltext_search
Using fulltext searches with DBD::SQLite

Modules

DBD::SQLite
Self-contained RDBMS in a DBI Driver
DBD::SQLite::Constants
common SQLite constants
DBD::SQLite::VirtualTable
SQLite virtual tables implemented in Perl
DBD::SQLite::VirtualTable::FileContent
virtual table for viewing file contents
DBD::SQLite::VirtualTable::PerlData
virtual table hooked to Perl data

Provides

DBD::SQLite::GetInfo
in lib/DBD/SQLite/GetInfo.pm
DBD::SQLite::VirtualTable::Cursor
in lib/DBD/SQLite/VirtualTable.pm
DBD::SQLite::VirtualTable::FileContent::Cursor
in lib/DBD/SQLite/VirtualTable/FileContent.pm
DBD::SQLite::VirtualTable::PerlData::Cursor
in lib/DBD/SQLite/VirtualTable/PerlData.pm

Other files