PT-2019-15808 · Sqlite+2 · Sqlite+2

Publicado 2019-12-05 · Atualizado 2025-11-15 · CVE-2019-19317

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SQLite version 3.30.1

Description The issue is related to the lookupName function in resolve.c, which incorrectly handles the colUsed bitmask for generated columns. This can lead to a denial of service or potentially other unspecified impacts.

Recommendations For SQLite version 3.30.1, consider updating to a newer version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-681

Identificadores relacionados

ALT-PU-2020-1088

ALT-PU-2020-2094

ALT-PU-2020-2183

CVE-2019-19317

OPENSUSE-SU-2021:1058-1

OPENSUSE-SU-2021:2320-1

OPENSUSE-SU-2021_1058-1

OPENSUSE-SU-2021_2320-1

SUSE-SU-2021:2320-1

SUSE-SU-2021:3215-1

Produtos afetados

Alt Linux

Sqlite

Suse

Referências · 64

• https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3 · Correção
• https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8 · Correção
• https://security.netapp.com/advisory/ntap-20191223-0001 · Nota
• https://suse.com/security/cve/CVE-2020-9327 · Nota
• https://suse.com/security/cve/CVE-2019-19645 · Nota
• https://suse.com/security/cve/CVE-2019-19926 · Nota
• https://suse.com/security/cve/CVE-2019-19925 · Nota
• https://suse.com/security/cve/CVE-2016-6153 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2021:1058-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-19646 · Nota
• https://bugzilla.suse.com/1160309 · Nota
• https://bugzilla.suse.com/1160439 · Nota
• https://bugzilla.suse.com/1160438 · Nota
• https://suse.com/security/cve/CVE-2020-13630 · Nota
• https://suse.com/security/cve/CVE-2019-19880 · Nota