Home

CVE-2019-19924

Description

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

Risk Information

Base Score
5.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score
Exploitation Probability
4.739

Associated Vulnerability

VulnerabilityOS Platform
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.11.0-1ubuntu1.4_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.11.0-1ubuntu1.4_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.22.0-1ubuntu0.3_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.22.0-1ubuntu0.3_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.29.0-2ubuntu0.2_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.29.0-2ubuntu0.2_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.11.0-1ubuntu1.4_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.11.0-1ubuntu1.4_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.22.0-1ubuntu0.3_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.22.0-1ubuntu0.3_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.29.0-2ubuntu0.2_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.29.0-2ubuntu0.2_amd64.debLinux
(RHSA-2020:1810) sqlite security and bug fix update lemon-3.26.0-6.el8.x86_64.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-3.26.0-6.el8.i686.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-3.26.0-6.el8.x86_64.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-debugsource-3.26.0-6.el8.i686.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-debugsource-3.26.0-6.el8.x86_64.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-devel-3.26.0-6.el8.i686.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-devel-3.26.0-6.el8.x86_64.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-doc-3.26.0-6.el8.noarch.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-libs-3.26.0-6.el8.i686.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-libs-3.26.0-6.el8.x86_64.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update lemon-3.26.0-6.el8.x86_64.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-3.26.0-6.el8.i686.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-3.26.0-6.el8.x86_64.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-devel-3.26.0-6.el8.i686.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-devel-3.26.0-6.el8.x86_64.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-doc-3.26.0-6.el8.noarch.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-libs-3.26.0-6.el8.i686.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-libs-3.26.0-6.el8.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234