CVE-2019-19645

Опубликовано: 09 дек. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

Ссылки

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Patch
Third Party Advisory
https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20191223-0001/
Third Party Advisory
https://usn.ubuntu.com/4394-1/
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html
Patch
Third Party Advisory
https://www.tenable.com/security/tns-2021-14
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Patch
Third Party Advisory
https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20191223-0001/
Third Party Advisory
https://usn.ubuntu.com/4394-1/
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html
Patch
Third Party Advisory
https://www.tenable.com/security/tns-2021-14
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*

Версия до 3.30.1 (включая)

Конфигурация 2

Одно из

cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*

Версия до 8.0.19 (включая)

Конфигурация 4

cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*

Версия до 5.19.0 (исключая)

Конфигурация 5

cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

Версия до 1.0.1.1 (исключая)

EPSS

Процентиль: 52%

0.00295

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-674

Связанные уязвимости

CVE-2019-19645

CVSS3: 5.5

ubuntu

около 6 лет назад

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

CVE-2019-19645

CVSS3: 5.5

redhat

около 6 лет назад

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

CVE-2019-19645

CVSS3: 5.5

msrc

больше 1 года назад

Описание отсутствует

CVE-2019-19645

CVSS3: 5.5

debian

около 6 лет назад

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite ...

GHSA-g6wf-ch53-mgqf

CVSS3: 5.5

github

больше 3 лет назад

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

EPSS

Процентиль: 52%

0.00295

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-674