CVE-2019-19646

Опубликовано: 09 дек. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

Ссылки

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Patch
Third Party Advisory
https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3
Third Party Advisory
https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20191223-0001/
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html
Patch
Third Party Advisory
https://www.sqlite.org/
Vendor Advisory
https://www.tenable.com/security/tns-2021-14
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Patch
Third Party Advisory
https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3
Third Party Advisory
https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20191223-0001/
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html
Patch
Third Party Advisory
https://www.sqlite.org/
Vendor Advisory
https://www.tenable.com/security/tns-2021-14
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*

Версия до 3.30.1 (включая)

Конфигурация 2

cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

Версия до 1.0.1.1 (исключая)

Конфигурация 3

cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*

Версия до 5.19.0 (исключая)

Конфигурация 4

cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*

Версия до 8.0.19 (включая)

Конфигурация 5

Одно из

cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07192

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-754

Связанные уязвимости

CVE-2019-19646

CVSS3: 9.8

ubuntu

около 6 лет назад

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

CVE-2019-19646

CVSS3: 6.3

redhat

около 6 лет назад

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

CVE-2019-19646

CVSS3: 9.8

msrc

больше 1 года назад

Описание отсутствует

CVE-2019-19646

CVSS3: 9.8

debian

около 6 лет назад

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_ ...

GHSA-g624-89xp-hmx8

CVSS3: 9.8

github

больше 3 лет назад

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

EPSS

Процентиль: 91%

0.07192

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-754