ID CVE-2019-9937
Summary In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.
References
Vulnerable Configurations
  • cpe:2.3:a:sqlite:sqlite:3.27.2:*:*:*:*:*:*:*
    cpe:2.3:a:sqlite:sqlite:3.27.2:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 23-08-2020 - 01:15)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 107562
confirm https://security.netapp.com/advisory/ntap-20190416-0005/
fedora
  • FEDORA-2019-8641591b3c
  • FEDORA-2019-a01751837d
gentoo GLSA-201908-09
misc
mlist [debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security update
suse openSUSE-SU-2019:1372
ubuntu USN-4019-1
Last major update 23-08-2020 - 01:15
Published 22-03-2019 - 08:29
Last modified 23-08-2020 - 01:15
Back to Top