PT-2019-15808 · Sqlite+2 · Sqlite+2

Published 2019-12-05 · Updated 2025-11-15 · CVE-2019-19317

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SQLite version 3.30.1

Description The issue is related to the lookupName function in resolve.c, which incorrectly handles the colUsed bitmask for generated columns. This can lead to a denial of service or potentially other unspecified impacts.

Recommendations For SQLite version 3.30.1, consider updating to a newer version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-681

Related Identifiers

ALT-PU-2020-1088

ALT-PU-2020-2094

ALT-PU-2020-2183

CVE-2019-19317

OPENSUSE-SU-2021:1058-1

OPENSUSE-SU-2021:2320-1

OPENSUSE-SU-2021_1058-1

OPENSUSE-SU-2021_2320-1

SUSE-SU-2021:2320-1

SUSE-SU-2021:3215-1

Affected Products

Alt Linux

Sqlite

Suse

References · 64

• https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3 · Patch
• https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2021:1058-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:2320-1 · Vendor Advisory
• https://oracle.com/security-alerts/cpuapr2020.html · Patch
• https://osv.dev/vulnerability/SUSE-SU-2021:3215-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:2320-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19317 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19317 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20191223-0001 · Note
• https://suse.com/security/cve/CVE-2020-9327 · Note
• https://suse.com/security/cve/CVE-2019-19645 · Note
• https://suse.com/security/cve/CVE-2019-19926 · Note
• https://suse.com/security/cve/CVE-2019-19925 · Note
• https://suse.com/security/cve/CVE-2016-6153 · Note