Yüksek CVSS 7.5
CVE-2019-19925: Sqlite: tehlikeli dosya yükleme
Açıklama (NVD)
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
Özet bilgiler
- Ürün
- Sqlite Sqlite
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %6,81 (yüzdelik 94)
- CWE
- CWE-434
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| sqlite-sqlite | 3.30.1 | 3.30.1 | — |
| siemens-sinec-infrastructure-network-services | — | — | 1.0.1.1 |
| oracle-mysql-workbench | — | 8.0.19 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
| debian-debian-linux | 10.0 | 10.0 | — |
| redhat-enterprise-linux-desktop | 6.0 | 6.0 | — |
| redhat-enterprise-linux-server | 6.0 | 6.0 | — |
| redhat-enterprise-linux-workstation | 6.0 | 6.0 | — |
| suse-package-hub | — | — | — |
| opensuse-backports-sle | 15.0 | 15.0 | — |
| opensuse-leap | 15.1 | 15.1 | — |
| netapp-cloud-backup | — | — | — |
Kaynaklar
- NVD kaydı
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- access.redhat.com
- cert-portal.siemens.com
- github.com
- security.netapp.com
- usn.ubuntu.com
- www.debian.org
- www.oracle.com
- lists.opensuse.org
- lists.opensuse.org
- lists.opensuse.org
- access.redhat.com
- cert-portal.siemens.com
- github.com
- security.netapp.com
- usn.ubuntu.com
- www.debian.org
- www.oracle.com
- cert-portal.siemens.com
- cert-portal.siemens.com
- CWE-434