CVE-2019-19880
Description
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
6.395
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple vulnerabilities fixed in Google Chrome (x64) (80.0.3987.87) | Windows |
| Multiple vulnerabilities fixed in Google Chrome (80.0.3987.87) | Windows |
| Multiple vulnerabilities fixed in Microsoft Edge for chromium business (80.0.361.48) | Windows |
| Multiple vulnerabilities fixed in Microsoft Edge for chromium business (x64) (80.0.361.48) | Windows |
| (RHSA-2020:0514) chromium-browser security update chromium-browser-80.0.3987.87-1.el6_10.i686.rpm | Linux |
| (RHSA-2020:0514) chromium-browser security update chromium-browser-80.0.3987.87-1.el6_10.x86_64.rpm | Linux |
| chromium security update(DSA-4638-1) chromium_80.0.3987.132-1~deb10u1_i386.deb | Linux |
| chromium security update(DSA-4638-1) chromium_80.0.3987.132-1~deb10u1_amd64.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) sqlite3_3.11.0-1ubuntu1.4_i386.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) sqlite3_3.11.0-1ubuntu1.4_amd64.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) sqlite3_3.22.0-1ubuntu0.3_i386.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) sqlite3_3.22.0-1ubuntu0.3_amd64.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) sqlite3_3.29.0-2ubuntu0.2_i386.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) sqlite3_3.29.0-2ubuntu0.2_amd64.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.11.0-1ubuntu1.4_i386.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.11.0-1ubuntu1.4_amd64.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.22.0-1ubuntu0.3_i386.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.22.0-1ubuntu0.3_amd64.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.29.0-2ubuntu0.2_i386.deb | Linux |
| C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.29.0-2ubuntu0.2_amd64.deb | Linux |
| Multiple vulnerabilities fixed in Google Chrome (80.0.3987.87) (For Debian) | Linux |
| Multiple vulnerabilities fixed in Google Chrome (80.0.3987.87) (For Centos) | Linux |
| Multiple vulnerabilities fixed in Google Chrome (80.0.3987.87) (For RedHat) | Linux |
| Multiple vulnerabilities fixed in Google Chrome (80.0.3987.87) (For Suse) | Linux |
| Multiple vulnerabilities fixed in Google Chrome (80.0.3987.87) (For Ubuntu) | Linux |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-312772 | Google Chrome (x64) (80.0.3987.87) |
| PATCH-312771 | Google Chrome (80.0.3987.87) |
| PATCH-109333 | Microsoft Edge for chromium business (99.0.1150.30) (x86) |
| PATCH-109332 | Microsoft Edge for chromium business (99.0.1150.30) (x64) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234