PT-2019-5316 · Sqlite+2 · Sqlite+2

Published 2019-12-09 · Updated 2022-04-15 · CVE-2019-19646

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.30.1

Description The issue is related to the handling of NOT NULL in an integrity check PRAGMA command in certain cases of generated columns. It is also described as a problem with insufficient checking of unusual or exceptional states in the integrity check PRAGMA command. This could potentially allow a remote attacker to gain full control over the application.

Recommendations For SQLite versions prior to 3.30.1, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

ALT-PU-2020-1088

ALT-PU-2020-2094

ALT-PU-2020-2183

ALT-PU-2020-2898

AZL-38566

BDU:2020-02371

CVE-2019-19646

OPENSUSE-SU-2021:1058-1

OPENSUSE-SU-2021:2320-1

OPENSUSE-SU-2021_1058-1

OPENSUSE-SU-2021_2320-1

SUSE-SU-2021:2320-1

SUSE-SU-2021:3215-1

Affected Products

Alt Linux

Sqlite

Suse

References · 68

• https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2021:1058-1 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-19646 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2021:2320-1 · Vendor Advisory
• https://oracle.com/security-alerts/cpuapr2020.html · Patch
• https://sqlite.org · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19646 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3215-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:2320-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-38566 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02371 · Security Note
• https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3 · Note
• https://security.netapp.com/advisory/ntap-20191223-0001 · Note
• https://suse.com/security/cve/CVE-2020-9327 · Note