PT-2019-4848 · Sqlite+5 · Sqlite+5

Publicado

2019-12-09

·

Atualizado

2022-04-15

·

CVE-2019-19645

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.30.1
Description The issue is related to a type determination error in the SQLite database management system. It can be triggered by certain types of self-referential views in conjunction with ALTER TABLE statements, allowing attackers to cause infinite recursion. This can lead to a denial of service.
Recommendations For versions prior to 3.30.1, update to a version that contains a fix for this issue to prevent potential denial of service attacks.

Correção

Uncontrolled Recursion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-674

Identificadores relacionados

ALT-PU-2020-1088
ALT-PU-2020-2094
ALT-PU-2020-2183
ALT-PU-2020-2898
AZL-39010
BDU:2020-01432
CVE-2019-19645
OPENSUSE-SU-2021:1058-1
OPENSUSE-SU-2021:2320-1
OPENSUSE-SU-2021_1058-1
OPENSUSE-SU-2021_2320-1
SUSE-SU-2021:2320-1
SUSE-SU-2021:3215-1
USN-4394-1

Produtos afetados

Alt Linux
Astra Linux
Linuxmint
Sqlite
Suse
Ubuntu