Home

CVE-2019-19959

Description

ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.52

Associated Vulnerability

VulnerabilityOS Platform
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.11.0-1ubuntu1.4_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.11.0-1ubuntu1.4_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.22.0-1ubuntu0.3_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.22.0-1ubuntu0.3_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.29.0-2ubuntu0.2_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) sqlite3_3.29.0-2ubuntu0.2_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.11.0-1ubuntu1.4_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.11.0-1ubuntu1.4_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.22.0-1ubuntu0.3_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.22.0-1ubuntu0.3_amd64.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.29.0-2ubuntu0.2_i386.debLinux
C library that implements an SQL database engine (USN-4298-1) libsqlite3-0_3.29.0-2ubuntu0.2_amd64.debLinux
(RHSA-2020:1810) sqlite security and bug fix update lemon-3.26.0-6.el8.x86_64.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-3.26.0-6.el8.i686.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-3.26.0-6.el8.x86_64.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-debugsource-3.26.0-6.el8.i686.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-debugsource-3.26.0-6.el8.x86_64.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-devel-3.26.0-6.el8.i686.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-devel-3.26.0-6.el8.x86_64.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-doc-3.26.0-6.el8.noarch.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-libs-3.26.0-6.el8.i686.rpmLinux
(RHSA-2020:1810) sqlite security and bug fix update sqlite-libs-3.26.0-6.el8.x86_64.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update lemon-3.26.0-6.el8.x86_64.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-3.26.0-6.el8.i686.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-3.26.0-6.el8.x86_64.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-devel-3.26.0-6.el8.i686.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-devel-3.26.0-6.el8.x86_64.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-doc-3.26.0-6.el8.noarch.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-libs-3.26.0-6.el8.i686.rpmLinux
(CESA-2020:1810) sqlite security and bug fix update sqlite-libs-3.26.0-6.el8.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234