ID CVE-2019-19926
Summary multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
References
Vulnerable Configurations
  • cpe:2.3:a:sqlite:sqlite:3.30.1:*:*:*:*:*:*:*
    cpe:2.3:a:sqlite:sqlite:3.30.1:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 06-08-2020 - 19:15)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
redhat via4
advisories
rhsa
id RHSA-2020:0514
rpms
  • chromium-browser-0:80.0.3987.87-1.el6_10
  • chromium-browser-debuginfo-0:80.0.3987.87-1.el6_10
refmap via4
confirm https://security.netapp.com/advisory/ntap-20200114-0003/
debian DSA-4638
misc
suse
  • openSUSE-SU-2020:0189
  • openSUSE-SU-2020:0210
  • openSUSE-SU-2020:0233
ubuntu
  • USN-4298-1
  • USN-4298-2
Last major update 06-08-2020 - 19:15
Published 23-12-2019 - 01:15
Last modified 06-08-2020 - 19:15
Back to Top