CVE-2019-19242

MEDIUM5.9Memory safety

JSON export Create alert

Description

SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected products

Canonical / Ubuntu Linux18.04 – 18.04
Canonical / Ubuntu Linux12.04 – 12.04
Canonical / Ubuntu Linux16.04 – 16.04
Canonical / Ubuntu Linux19.04 – 19.04
Canonical / Ubuntu Linux19.10 – 19.10
oracle / mysql_workbench8.0.19
RedHat / enterprise_linux8.0 – 8.0
Siemens / sinec_infrastructure_network_services1.0.1.1
SQLite / SQLite3.30.1 – 3.30.1

References

PATCHhttps://github.com/sqlite/sqlite/commit/57f7ece78410a8aae86aa4625fb7556897db384c
VENDOR_ADVISORYhttps://usn.ubuntu.com/4205-1/
VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpuapr2020.html
MISChttps://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

Updated 16m ago · 8 sources