NULL Pointer Dereference in tableColumnList in SQLite 3.20.1

CVE-2017-15286 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.

Learn more about our Web Application Penetration Testing UK.