Orta CVSS 6.5

CVE-2019-16168: Sqlite: güvenlik açığı

Yayın: 9 Eylül 2019 20:15 · Güncelleme: 6 Kasım 2026 09:45

Açıklama (NVD)

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

Özet bilgiler

Ürün: Sqlite Sqlite
CVSS v3.1: 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS: %4,22 (yüzdelik 91)
CWE: CWE-369
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
sqlite-sqlite	3.8.5	3.29.0	—
netapp-active-iq-unified-manager	7.3	—	—
netapp-active-iq-unified-manager	9.5	—	—
netapp-e-series-santricity-os-controller	11.0.0	11.60.3	—
netapp-oncommand-insight	—	—	—
netapp-oncommand-workflow-automation	—	—	—
netapp-ontap-select-deploy-administration-utility	—	—	—
netapp-santricity-unified-manager	—	—	—
netapp-steelstore-cloud-integrated-storage	—	—	—
canonical-ubuntu-linux	12.04	12.04	—
canonical-ubuntu-linux	16.04	16.04	—
canonical-ubuntu-linux	18.04	18.04	—
canonical-ubuntu-linux	19.04	19.04	—
canonical-ubuntu-linux	19.10	19.10	—
fedoraproject-fedora	30	30	—
debian-debian-linux	9.0	9.0	—
tenable-nessus-agent	—	8.2.3	—
oracle-communications-design-studio	7.3.4.3.0	7.3.4.3.0	—
oracle-communications-design-studio	7.3.5.5.0	7.3.5.5.0	—
oracle-communications-design-studio	7.4.0.4.0	7.4.0.4.0	—
oracle-jdk	1.8.0	1.8.0	—
oracle-jre	1.8.0	1.8.0	—
oracle-mysql	8.0.0	8.0.18	—
oracle-outside-in-technology	8.5.4	8.5.4	—
oracle-solaris	11	11	—
oracle-zfs-storage-appliance	8.8	8.8	—
mcafee-policy-auditor	—	—	6.5.1

Kaynaklar

Uygulamada aç Tüm CVE kayıtları