CVE-2019-19603
Advisory lineage Upstream: 0 Downstream: 8
Modified
Published: 09 Dec 2019, 18:44
Last modified:05 Aug 2024, 02:25
Vulnerability Summary
Overall Risk (default)
medium
30/100 CVSS Score
7.5 HIGH
v3.1 (nvd)
EPSS Score
0.65% LOW
1% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
09 Dec 2019, 18:44
Published
Vulnerability first disclosed
05 Aug 2024, 02:25
Last Modified
Vulnerability information updated
Description
SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.
CVSS Metrics
- v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS Trends
Current EPSS score: 0.65%• Percentile: 71%
Affected Systems
- apache•guacamole
1.3.0
- netapp•cloud_backup
na
- netapp•ontap_select_deploy_administration_utility
na
- oracle•mysql_workbench
≤ 8.0.19
- siemens•sinec_infrastructure_network_services
< 1.0.1.1 | 1.0.1.1
- sqlite•sqlite
3.30.1
References (7)
- https://www.sqlite.org/
- https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13
- https://security.netapp.com/advisory/ntap-20191223-0001/
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://usn.ubuntu.com/4394-1/
- https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf