Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2020-15358)

Sep 22, 2020 8:00 pm EDT

Categorized: Critical Severity

Share this post:

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Tivoli Composite Application Manager for Transactions (Response Time)	7.4.0.2
IBM Tivoli Composite Application Manager for Transactions (Response Time)	7.4.0.1
IBM Cloud Application Performance Management – Response Time Monitoring Agent	8.1.4

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6335575

from IBM Product Security Incident Response Team https://ift.tt/3cnUxxK