ID CVE-2019-19923
Summary flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).
References
Vulnerable Configurations
  • cpe:2.3:a:sqlite:sqlite:3.30.1:*:*:*:*:*:*:*
    cpe:2.3:a:sqlite:sqlite:3.30.1:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 14-01-2020 - 11:15)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
redhat via4
advisories
rhsa
id RHSA-2020:0514
rpms
  • chromium-browser-0:80.0.3987.87-1.el6_10
  • chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10
  • lemon-0:3.26.0-6.el8
  • lemon-debuginfo-0:3.26.0-6.el8
  • sqlite-0:3.26.0-6.el8
  • sqlite-analyzer-debuginfo-0:3.26.0-6.el8
  • sqlite-debuginfo-0:3.26.0-6.el8
  • sqlite-debugsource-0:3.26.0-6.el8
  • sqlite-devel-0:3.26.0-6.el8
  • sqlite-doc-0:3.26.0-6.el8
  • sqlite-libs-0:3.26.0-6.el8
  • sqlite-libs-debuginfo-0:3.26.0-6.el8
  • sqlite-tcl-debuginfo-0:3.26.0-6.el8
refmap via4
confirm https://security.netapp.com/advisory/ntap-20200114-0003/
debian DSA-4638
misc
suse
  • openSUSE-SU-2020:0189
  • openSUSE-SU-2020:0210
  • openSUSE-SU-2020:0233
ubuntu USN-4298-1
Last major update 14-01-2020 - 11:15
Published 24-12-2019 - 16:15
Last modified 14-01-2020 - 11:15
Back to Top