Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2019-9937

Опубликовано: 18 мар. 2019
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.

Отчет

This issue did not affect the versions of sqlite as shipped with Red Hat Enterprise Linux 6 and 7 as they did not include support for fts5.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5sqliteNot affected
Red Hat Enterprise Linux 6sqliteNot affected
Red Hat Enterprise Linux 7sqliteNot affected
Red Hat Enterprise Linux 8sqliteFix deferred

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1692357sqlite: null-pointer dereference in function fts5ChunkIterate in sqlite3.c

EPSS

Процентиль: 88%
0.04004
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 7 лет назад

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.

CVSS3: 7.5
nvd
почти 7 лет назад

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.

CVSS3: 7.5
debian
почти 7 лет назад

In SQLite 3.27.2, interleaving reads and writes in a single transactio ...

CVSS3: 7.5
github
больше 3 лет назад

In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.

CVSS3: 7.5
fstec
почти 7 лет назад

Уязвимость компонентов ext/fts5/fts5_hash.c и ext/fts5/fts5_index.c системы управления базами данных SQLite, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 88%
0.04004
Низкий

3.3 Low

CVSS3