{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_vex", "csaf_version": "2.0", "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "title": "potential use-after-free bug when processing a subquery with both a correlated WHERE clause and a \"HAVING 0\" clause and where the parent query is an aggregate", "tracking": { "current_release_date": "2026-07-27T10:26:12+00:00", "generator": { "date": "2026-07-27T10:26:12+00:00", "engine": { "name": "CSAF Generator", "version": "3.1.0" } }, "id": "CVE-2021-20227", "initial_release_date": "2021-01-21T00:00:00+00:00", "revision_history": [ { "date": "2026-07-27T10:26:12+00:00", "number": "1", "summary": "Last generated version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "Red Hat", "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux 6-els", "product": { "name": "Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 7-els", "product": { "name": "Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:7" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 8.10.z", "product": { "name": "Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.0.0.z", "product": { "name": "Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.0" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.2.0.z", "product": { "name": "Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.2" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.4.z", "product": { "name": "Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.4" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.6.z", "product": { "name": "Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.7", "product": { "name": "Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.7.z", "product": { "name": "Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux 9.8", "product": { "name": "Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9" } } }, { "category": "product_version", "name": "lemon", "product": { "name": "lemon", "product_id": "lemon", "product_identification_helper": { "purl": "pkg:rpm/redhat/lemon" } } }, { "category": "product_version", "name": "lemon-debuginfo", "product": { "name": "lemon-debuginfo", "product_id": "lemon-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/lemon-debuginfo" } } }, { "category": "product_version", "name": "sqlite", "product": { "name": "sqlite", "product_id": "sqlite", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite" } } }, { "category": "product_version", "name": "sqlite-analyzer", "product": { "name": "sqlite-analyzer", "product_id": "sqlite-analyzer", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-analyzer" } } }, { "category": "product_version", "name": "sqlite-analyzer-debuginfo", "product": { "name": "sqlite-analyzer-debuginfo", "product_id": "sqlite-analyzer-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-analyzer-debuginfo" } } }, { "category": "product_version", "name": "sqlite-debuginfo", "product": { "name": "sqlite-debuginfo", "product_id": "sqlite-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-debuginfo" } } }, { "category": "product_version", "name": "sqlite-debugsource", "product": { "name": "sqlite-debugsource", "product_id": "sqlite-debugsource", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-debugsource" } } }, { "category": "product_version", "name": "sqlite-devel", "product": { "name": "sqlite-devel", "product_id": "sqlite-devel", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-devel" } } }, { "category": "product_version", "name": "sqlite-doc", "product": { "name": "sqlite-doc", "product_id": "sqlite-doc", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-doc" } } }, { "category": "product_version", "name": "sqlite-libs", "product": { "name": "sqlite-libs", "product_id": "sqlite-libs", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-libs" } } }, { "category": "product_version", "name": "sqlite-libs-debuginfo", "product": { "name": "sqlite-libs-debuginfo", "product_id": "sqlite-libs-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-libs-debuginfo" } } }, { "category": "product_version", "name": "sqlite-tcl", "product": { "name": "sqlite-tcl", "product_id": "sqlite-tcl", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-tcl" } } }, { "category": "product_version", "name": "sqlite-tcl-debuginfo", "product": { "name": "sqlite-tcl-debuginfo", "product_id": "sqlite-tcl-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-tcl-debuginfo" } } }, { "category": "product_version", "name": "sqlite-tools", "product": { "name": "sqlite-tools", "product_id": "sqlite-tools", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-tools" } } }, { "category": "product_version", "name": "sqlite-tools-debuginfo", "product": { "name": "sqlite-tools-debuginfo", "product_id": "sqlite-tools-debuginfo", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite-tools-debuginfo" } } }, { "category": "product_version", "name": "sqlite", "product": { "name": "sqlite", "product_id": "sqlite.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/sqlite?arch=src" } } } ] } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "lemon as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:lemon" }, "product_reference": "lemon", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "lemon as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:lemon" }, "product_reference": "lemon", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "lemon as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:lemon" }, "product_reference": "lemon", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "lemon as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:lemon" }, "product_reference": "lemon", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "lemon as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:lemon" }, "product_reference": "lemon", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "lemon as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:lemon" }, "product_reference": "lemon", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "lemon-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:lemon-debuginfo" }, "product_reference": "lemon-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "lemon-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:lemon-debuginfo" }, "product_reference": "lemon-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "lemon-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:lemon-debuginfo" }, "product_reference": "lemon-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:sqlite" }, "product_reference": "sqlite", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:sqlite" }, "product_reference": "sqlite", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite" }, "product_reference": "sqlite", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:sqlite" }, "product_reference": "sqlite", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:sqlite" }, "product_reference": "sqlite", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:sqlite" }, "product_reference": "sqlite", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite" }, "product_reference": "sqlite", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite" }, "product_reference": "sqlite", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:sqlite" }, "product_reference": "sqlite", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-analyzer as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-analyzer" }, "product_reference": "sqlite-analyzer", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-analyzer as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-analyzer" }, "product_reference": "sqlite-analyzer", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-analyzer as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-analyzer" }, "product_reference": "sqlite-analyzer", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-analyzer-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-analyzer-debuginfo" }, "product_reference": "sqlite-analyzer-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-analyzer-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-analyzer-debuginfo" }, "product_reference": "sqlite-analyzer-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-analyzer-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-analyzer-debuginfo" }, "product_reference": "sqlite-analyzer-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-debuginfo" }, "product_reference": "sqlite-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-debuginfo" }, "product_reference": "sqlite-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-debuginfo" }, "product_reference": "sqlite-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-debuginfo as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:sqlite-debuginfo" }, "product_reference": "sqlite-debuginfo", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-debuginfo as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:sqlite-debuginfo" }, "product_reference": "sqlite-debuginfo", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-debugsource as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-debugsource" }, "product_reference": "sqlite-debugsource", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-debugsource as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-debugsource" }, "product_reference": "sqlite-debugsource", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-debugsource as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-debugsource" }, "product_reference": "sqlite-debugsource", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-devel as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:sqlite-devel" }, "product_reference": "sqlite-devel", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-devel as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:sqlite-devel" }, "product_reference": "sqlite-devel", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-devel as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-devel" }, "product_reference": "sqlite-devel", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-devel as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:sqlite-devel" }, "product_reference": "sqlite-devel", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-devel as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:sqlite-devel" }, "product_reference": "sqlite-devel", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-devel as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:sqlite-devel" }, "product_reference": "sqlite-devel", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-devel as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:sqlite-devel" }, "product_reference": "sqlite-devel", "relates_to_product_reference": "rhel-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-devel as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-devel" }, "product_reference": "sqlite-devel", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-devel as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-devel" }, "product_reference": "sqlite-devel", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-doc as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-doc" }, "product_reference": "sqlite-doc", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-doc as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:sqlite-doc" }, "product_reference": "sqlite-doc", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-doc as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:sqlite-doc" }, "product_reference": "sqlite-doc", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-doc as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-doc" }, "product_reference": "sqlite-doc", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-doc as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-doc" }, "product_reference": "sqlite-doc", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-libs as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-libs" }, "product_reference": "sqlite-libs", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-libs as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-libs" }, "product_reference": "sqlite-libs", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-libs as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-libs" }, "product_reference": "sqlite-libs", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-libs-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-libs-debuginfo" }, "product_reference": "sqlite-libs-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-libs-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-libs-debuginfo" }, "product_reference": "sqlite-libs-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-libs-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-libs-debuginfo" }, "product_reference": "sqlite-libs-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tcl as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-tcl" }, "product_reference": "sqlite-tcl", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tcl as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-tcl" }, "product_reference": "sqlite-tcl", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tcl as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-tcl" }, "product_reference": "sqlite-tcl", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tcl as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:sqlite-tcl" }, "product_reference": "sqlite-tcl", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tcl as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:sqlite-tcl" }, "product_reference": "sqlite-tcl", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tcl-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-tcl-debuginfo" }, "product_reference": "sqlite-tcl-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tcl-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-tcl-debuginfo" }, "product_reference": "sqlite-tcl-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tcl-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-tcl-debuginfo" }, "product_reference": "sqlite-tcl-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tools as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-tools" }, "product_reference": "sqlite-tools", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tools as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-tools" }, "product_reference": "sqlite-tools", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tools as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-tools" }, "product_reference": "sqlite-tools", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tools-debuginfo as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite-tools-debuginfo" }, "product_reference": "sqlite-tools-debuginfo", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tools-debuginfo as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite-tools-debuginfo" }, "product_reference": "sqlite-tools-debuginfo", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite-tools-debuginfo as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite-tools-debuginfo" }, "product_reference": "sqlite-tools-debuginfo", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite.src as a component of Red Hat Enterprise Linux 9.6.z", "product_id": "rhel-9.6.z.eus:sqlite.src" }, "product_reference": "sqlite.src", "relates_to_product_reference": "rhel-9.6.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite.src as a component of Red Hat Enterprise Linux 9.2.0.z", "product_id": "rhel-9.2.0.z.eus:sqlite.src" }, "product_reference": "sqlite.src", "relates_to_product_reference": "rhel-9.2.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite.src as a component of Red Hat Enterprise Linux 8.10.z", "product_id": "rhel-8:sqlite.src" }, "product_reference": "sqlite.src", "relates_to_product_reference": "rhel-8" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite.src as a component of Red Hat Enterprise Linux 6-els", "product_id": "rhel-6-els.els:sqlite.src" }, "product_reference": "sqlite.src", "relates_to_product_reference": "rhel-6-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite.src as a component of Red Hat Enterprise Linux 7-els", "product_id": "rhel-7-els.els:sqlite.src" }, "product_reference": "sqlite.src", "relates_to_product_reference": "rhel-7-els.els" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite.src as a component of Red Hat Enterprise Linux 9.7", "product_id": "rhel-9.7:sqlite.src" }, "product_reference": "sqlite.src", "relates_to_product_reference": "rhel-9.7" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite.src as a component of Red Hat Enterprise Linux 9.7.z", "product_id": "rhel-9.7.z:sqlite.src" }, "product_reference": "sqlite.src", "relates_to_product_reference": "rhel-9.7.z" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite.src as a component of Red Hat Enterprise Linux 9.4.z", "product_id": "rhel-9.4.z.eus:sqlite.src" }, "product_reference": "sqlite.src", "relates_to_product_reference": "rhel-9.4.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite.src as a component of Red Hat Enterprise Linux 9.0.0.z", "product_id": "rhel-9.0.0.z.eus:sqlite.src" }, "product_reference": "sqlite.src", "relates_to_product_reference": "rhel-9.0.0.z.eus" }, { "category": "default_component_of", "full_product_name": { "name": "sqlite.src as a component of Red Hat Enterprise Linux 9.8", "product_id": "rhel-9.8:sqlite.src" }, "product_reference": "sqlite.src", "relates_to_product_reference": "rhel-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-20227", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2021-02-03T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "rhel-6-els.els:lemon", "rhel-6-els.els:sqlite", "rhel-6-els.els:sqlite-debuginfo", "rhel-6-els.els:sqlite-devel", "rhel-6-els.els:sqlite-doc", "rhel-6-els.els:sqlite-tcl", "rhel-6-els.els:sqlite.src", "rhel-7-els.els:lemon", "rhel-7-els.els:sqlite", "rhel-7-els.els:sqlite-debuginfo", "rhel-7-els.els:sqlite-devel", "rhel-7-els.els:sqlite-doc", "rhel-7-els.els:sqlite-tcl", "rhel-7-els.els:sqlite.src", "rhel-8:lemon", "rhel-8:sqlite.src", "rhel-9.0.0.z.eus:sqlite", "rhel-9.0.0.z.eus:sqlite-devel", "rhel-9.0.0.z.eus:sqlite.src", "rhel-9.2.0.z.eus:lemon", "rhel-9.2.0.z.eus:lemon-debuginfo", "rhel-9.2.0.z.eus:sqlite", "rhel-9.2.0.z.eus:sqlite-analyzer", "rhel-9.2.0.z.eus:sqlite-analyzer-debuginfo", "rhel-9.2.0.z.eus:sqlite-debuginfo", "rhel-9.2.0.z.eus:sqlite-debugsource", "rhel-9.2.0.z.eus:sqlite-devel", "rhel-9.2.0.z.eus:sqlite-doc", "rhel-9.2.0.z.eus:sqlite-libs", "rhel-9.2.0.z.eus:sqlite-libs-debuginfo", "rhel-9.2.0.z.eus:sqlite-tcl", "rhel-9.2.0.z.eus:sqlite-tcl-debuginfo", "rhel-9.2.0.z.eus:sqlite-tools", "rhel-9.2.0.z.eus:sqlite-tools-debuginfo", "rhel-9.2.0.z.eus:sqlite.src", "rhel-9.4.z.eus:lemon", "rhel-9.4.z.eus:lemon-debuginfo", "rhel-9.4.z.eus:sqlite", "rhel-9.4.z.eus:sqlite-analyzer", "rhel-9.4.z.eus:sqlite-analyzer-debuginfo", "rhel-9.4.z.eus:sqlite-debuginfo", "rhel-9.4.z.eus:sqlite-debugsource", "rhel-9.4.z.eus:sqlite-devel", "rhel-9.4.z.eus:sqlite-doc", "rhel-9.4.z.eus:sqlite-libs", "rhel-9.4.z.eus:sqlite-libs-debuginfo", "rhel-9.4.z.eus:sqlite-tcl", "rhel-9.4.z.eus:sqlite-tcl-debuginfo", "rhel-9.4.z.eus:sqlite-tools", "rhel-9.4.z.eus:sqlite-tools-debuginfo", "rhel-9.4.z.eus:sqlite.src", "rhel-9.6.z.eus:lemon", "rhel-9.6.z.eus:lemon-debuginfo", "rhel-9.6.z.eus:sqlite", "rhel-9.6.z.eus:sqlite-analyzer", "rhel-9.6.z.eus:sqlite-analyzer-debuginfo", "rhel-9.6.z.eus:sqlite-debuginfo", "rhel-9.6.z.eus:sqlite-debugsource", "rhel-9.6.z.eus:sqlite-devel", "rhel-9.6.z.eus:sqlite-doc", "rhel-9.6.z.eus:sqlite-libs", "rhel-9.6.z.eus:sqlite-libs-debuginfo", "rhel-9.6.z.eus:sqlite-tcl", "rhel-9.6.z.eus:sqlite-tcl-debuginfo", "rhel-9.6.z.eus:sqlite-tools", "rhel-9.6.z.eus:sqlite-tools-debuginfo", "rhel-9.6.z.eus:sqlite.src", "rhel-9.7.z:sqlite", "rhel-9.7.z:sqlite-devel", "rhel-9.7.z:sqlite.src", "rhel-9.7:sqlite", "rhel-9.7:sqlite-devel", "rhel-9.7:sqlite.src", "rhel-9.8:sqlite", "rhel-9.8:sqlite-devel", "rhel-9.8:sqlite.src" ] } ], "notes": [ { "category": "other", "text": "SQLite as shipped in Red Hat Enterprise Linux 6, 7 and 8 is not affected by this flaw as the code was introduced in a newer version of SQLite than that shipped. This flaw has been marked Moderate because in order to run such a query, a user would need to already have access to query the data in the database.", "title": "Statement" }, { "category": "description", "text": "A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" } ], "product_status": { "known_not_affected": [ "rhel-6-els.els:lemon", "rhel-6-els.els:sqlite", "rhel-6-els.els:sqlite-debuginfo", "rhel-6-els.els:sqlite-devel", "rhel-6-els.els:sqlite-doc", "rhel-6-els.els:sqlite-tcl", "rhel-6-els.els:sqlite.src", "rhel-7-els.els:lemon", "rhel-7-els.els:sqlite", "rhel-7-els.els:sqlite-debuginfo", "rhel-7-els.els:sqlite-devel", "rhel-7-els.els:sqlite-doc", "rhel-7-els.els:sqlite-tcl", "rhel-7-els.els:sqlite.src", "rhel-8:lemon", "rhel-8:sqlite.src", "rhel-9.0.0.z.eus:sqlite", "rhel-9.0.0.z.eus:sqlite-devel", "rhel-9.0.0.z.eus:sqlite.src", "rhel-9.2.0.z.eus:lemon", "rhel-9.2.0.z.eus:lemon-debuginfo", "rhel-9.2.0.z.eus:sqlite", "rhel-9.2.0.z.eus:sqlite-analyzer", "rhel-9.2.0.z.eus:sqlite-analyzer-debuginfo", "rhel-9.2.0.z.eus:sqlite-debuginfo", "rhel-9.2.0.z.eus:sqlite-debugsource", "rhel-9.2.0.z.eus:sqlite-devel", "rhel-9.2.0.z.eus:sqlite-doc", "rhel-9.2.0.z.eus:sqlite-libs", "rhel-9.2.0.z.eus:sqlite-libs-debuginfo", "rhel-9.2.0.z.eus:sqlite-tcl", "rhel-9.2.0.z.eus:sqlite-tcl-debuginfo", "rhel-9.2.0.z.eus:sqlite-tools", "rhel-9.2.0.z.eus:sqlite-tools-debuginfo", "rhel-9.2.0.z.eus:sqlite.src", "rhel-9.4.z.eus:lemon", "rhel-9.4.z.eus:lemon-debuginfo", "rhel-9.4.z.eus:sqlite", "rhel-9.4.z.eus:sqlite-analyzer", "rhel-9.4.z.eus:sqlite-analyzer-debuginfo", "rhel-9.4.z.eus:sqlite-debuginfo", "rhel-9.4.z.eus:sqlite-debugsource", "rhel-9.4.z.eus:sqlite-devel", "rhel-9.4.z.eus:sqlite-doc", "rhel-9.4.z.eus:sqlite-libs", "rhel-9.4.z.eus:sqlite-libs-debuginfo", "rhel-9.4.z.eus:sqlite-tcl", "rhel-9.4.z.eus:sqlite-tcl-debuginfo", "rhel-9.4.z.eus:sqlite-tools", "rhel-9.4.z.eus:sqlite-tools-debuginfo", "rhel-9.4.z.eus:sqlite.src", "rhel-9.6.z.eus:lemon", "rhel-9.6.z.eus:lemon-debuginfo", "rhel-9.6.z.eus:sqlite", "rhel-9.6.z.eus:sqlite-analyzer", "rhel-9.6.z.eus:sqlite-analyzer-debuginfo", "rhel-9.6.z.eus:sqlite-debuginfo", "rhel-9.6.z.eus:sqlite-debugsource", "rhel-9.6.z.eus:sqlite-devel", "rhel-9.6.z.eus:sqlite-doc", "rhel-9.6.z.eus:sqlite-libs", "rhel-9.6.z.eus:sqlite-libs-debuginfo", "rhel-9.6.z.eus:sqlite-tcl", "rhel-9.6.z.eus:sqlite-tcl-debuginfo", "rhel-9.6.z.eus:sqlite-tools", "rhel-9.6.z.eus:sqlite-tools-debuginfo", "rhel-9.6.z.eus:sqlite.src", "rhel-9.7.z:sqlite", "rhel-9.7.z:sqlite-devel", "rhel-9.7.z:sqlite.src", "rhel-9.7:sqlite", "rhel-9.7:sqlite-devel", "rhel-9.7:sqlite.src", "rhel-9.8:sqlite", "rhel-9.8:sqlite-devel", "rhel-9.8:sqlite.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-20227" }, { "category": "external", "summary": "nvd.nist.gov", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20227" }, { "category": "external", "summary": "www.cve.org", "url": "https://www.cve.org/CVERecord?id=CVE-2021-20227" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H", "baseScore": 6.1, "baseSeverity": "MEDIUM" }, "products": [ "rhel-6-els.els:lemon", "rhel-6-els.els:sqlite", "rhel-6-els.els:sqlite-debuginfo", "rhel-6-els.els:sqlite-devel", "rhel-6-els.els:sqlite-doc", "rhel-6-els.els:sqlite-tcl", "rhel-6-els.els:sqlite.src", "rhel-7-els.els:lemon", "rhel-7-els.els:sqlite", "rhel-7-els.els:sqlite-debuginfo", "rhel-7-els.els:sqlite-devel", "rhel-7-els.els:sqlite-doc", "rhel-7-els.els:sqlite-tcl", "rhel-7-els.els:sqlite.src", "rhel-8:lemon", "rhel-8:sqlite.src", "rhel-9.0.0.z.eus:sqlite", "rhel-9.0.0.z.eus:sqlite-devel", "rhel-9.0.0.z.eus:sqlite.src", "rhel-9.2.0.z.eus:lemon", "rhel-9.2.0.z.eus:lemon-debuginfo", "rhel-9.2.0.z.eus:sqlite", "rhel-9.2.0.z.eus:sqlite-analyzer", "rhel-9.2.0.z.eus:sqlite-analyzer-debuginfo", "rhel-9.2.0.z.eus:sqlite-debuginfo", "rhel-9.2.0.z.eus:sqlite-debugsource", "rhel-9.2.0.z.eus:sqlite-devel", "rhel-9.2.0.z.eus:sqlite-doc", "rhel-9.2.0.z.eus:sqlite-libs", "rhel-9.2.0.z.eus:sqlite-libs-debuginfo", "rhel-9.2.0.z.eus:sqlite-tcl", "rhel-9.2.0.z.eus:sqlite-tcl-debuginfo", "rhel-9.2.0.z.eus:sqlite-tools", "rhel-9.2.0.z.eus:sqlite-tools-debuginfo", "rhel-9.2.0.z.eus:sqlite.src", "rhel-9.4.z.eus:lemon", "rhel-9.4.z.eus:lemon-debuginfo", "rhel-9.4.z.eus:sqlite", "rhel-9.4.z.eus:sqlite-analyzer", "rhel-9.4.z.eus:sqlite-analyzer-debuginfo", "rhel-9.4.z.eus:sqlite-debuginfo", "rhel-9.4.z.eus:sqlite-debugsource", "rhel-9.4.z.eus:sqlite-devel", "rhel-9.4.z.eus:sqlite-doc", "rhel-9.4.z.eus:sqlite-libs", "rhel-9.4.z.eus:sqlite-libs-debuginfo", "rhel-9.4.z.eus:sqlite-tcl", "rhel-9.4.z.eus:sqlite-tcl-debuginfo", "rhel-9.4.z.eus:sqlite-tools", "rhel-9.4.z.eus:sqlite-tools-debuginfo", "rhel-9.4.z.eus:sqlite.src", "rhel-9.6.z.eus:lemon", "rhel-9.6.z.eus:lemon-debuginfo", "rhel-9.6.z.eus:sqlite", "rhel-9.6.z.eus:sqlite-analyzer", "rhel-9.6.z.eus:sqlite-analyzer-debuginfo", "rhel-9.6.z.eus:sqlite-debuginfo", "rhel-9.6.z.eus:sqlite-debugsource", "rhel-9.6.z.eus:sqlite-devel", "rhel-9.6.z.eus:sqlite-doc", "rhel-9.6.z.eus:sqlite-libs", "rhel-9.6.z.eus:sqlite-libs-debuginfo", "rhel-9.6.z.eus:sqlite-tcl", "rhel-9.6.z.eus:sqlite-tcl-debuginfo", "rhel-9.6.z.eus:sqlite-tools", "rhel-9.6.z.eus:sqlite-tools-debuginfo", "rhel-9.6.z.eus:sqlite.src", "rhel-9.7.z:sqlite", "rhel-9.7.z:sqlite-devel", "rhel-9.7.z:sqlite.src", "rhel-9.7:sqlite", "rhel-9.7:sqlite-devel", "rhel-9.7:sqlite.src", "rhel-9.8:sqlite", "rhel-9.8:sqlite-devel", "rhel-9.8:sqlite.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate", "product_ids": [ "rhel-6-els.els:lemon", "rhel-6-els.els:sqlite", "rhel-6-els.els:sqlite-debuginfo", "rhel-6-els.els:sqlite-devel", "rhel-6-els.els:sqlite-doc", "rhel-6-els.els:sqlite-tcl", "rhel-6-els.els:sqlite.src", "rhel-7-els.els:lemon", "rhel-7-els.els:sqlite", "rhel-7-els.els:sqlite-debuginfo", "rhel-7-els.els:sqlite-devel", "rhel-7-els.els:sqlite-doc", "rhel-7-els.els:sqlite-tcl", "rhel-7-els.els:sqlite.src", "rhel-8:lemon", "rhel-8:sqlite.src", "rhel-9.0.0.z.eus:sqlite", "rhel-9.0.0.z.eus:sqlite-devel", "rhel-9.0.0.z.eus:sqlite.src", "rhel-9.2.0.z.eus:lemon", "rhel-9.2.0.z.eus:lemon-debuginfo", "rhel-9.2.0.z.eus:sqlite", "rhel-9.2.0.z.eus:sqlite-analyzer", "rhel-9.2.0.z.eus:sqlite-analyzer-debuginfo", "rhel-9.2.0.z.eus:sqlite-debuginfo", "rhel-9.2.0.z.eus:sqlite-debugsource", "rhel-9.2.0.z.eus:sqlite-devel", "rhel-9.2.0.z.eus:sqlite-doc", "rhel-9.2.0.z.eus:sqlite-libs", "rhel-9.2.0.z.eus:sqlite-libs-debuginfo", "rhel-9.2.0.z.eus:sqlite-tcl", "rhel-9.2.0.z.eus:sqlite-tcl-debuginfo", "rhel-9.2.0.z.eus:sqlite-tools", "rhel-9.2.0.z.eus:sqlite-tools-debuginfo", "rhel-9.2.0.z.eus:sqlite.src", "rhel-9.4.z.eus:lemon", "rhel-9.4.z.eus:lemon-debuginfo", "rhel-9.4.z.eus:sqlite", "rhel-9.4.z.eus:sqlite-analyzer", "rhel-9.4.z.eus:sqlite-analyzer-debuginfo", "rhel-9.4.z.eus:sqlite-debuginfo", "rhel-9.4.z.eus:sqlite-debugsource", "rhel-9.4.z.eus:sqlite-devel", "rhel-9.4.z.eus:sqlite-doc", "rhel-9.4.z.eus:sqlite-libs", "rhel-9.4.z.eus:sqlite-libs-debuginfo", "rhel-9.4.z.eus:sqlite-tcl", "rhel-9.4.z.eus:sqlite-tcl-debuginfo", "rhel-9.4.z.eus:sqlite-tools", "rhel-9.4.z.eus:sqlite-tools-debuginfo", "rhel-9.4.z.eus:sqlite.src", "rhel-9.6.z.eus:lemon", "rhel-9.6.z.eus:lemon-debuginfo", "rhel-9.6.z.eus:sqlite", "rhel-9.6.z.eus:sqlite-analyzer", "rhel-9.6.z.eus:sqlite-analyzer-debuginfo", "rhel-9.6.z.eus:sqlite-debuginfo", "rhel-9.6.z.eus:sqlite-debugsource", "rhel-9.6.z.eus:sqlite-devel", "rhel-9.6.z.eus:sqlite-doc", "rhel-9.6.z.eus:sqlite-libs", "rhel-9.6.z.eus:sqlite-libs-debuginfo", "rhel-9.6.z.eus:sqlite-tcl", "rhel-9.6.z.eus:sqlite-tcl-debuginfo", "rhel-9.6.z.eus:sqlite-tools", "rhel-9.6.z.eus:sqlite-tools-debuginfo", "rhel-9.6.z.eus:sqlite.src", "rhel-9.7.z:sqlite", "rhel-9.7.z:sqlite-devel", "rhel-9.7.z:sqlite.src", "rhel-9.7:sqlite", "rhel-9.7:sqlite-devel", "rhel-9.7:sqlite.src", "rhel-9.8:sqlite", "rhel-9.8:sqlite-devel", "rhel-9.8:sqlite.src" ] } ], "title": "potential use-after-free bug when processing a subquery with both a correlated WHERE clause and a \"HAVING 0\" clause and where the parent query is an aggregate" } ] }