CVE-2019-19645

Description

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

CVSS breakdown

Affected products

• NetApp / cloud_backup
• NetApp / ONTAP Select Deploy administration utility
• oracle / mysql_workbench8.0.19
• Siemens / sinec_infrastructure_network_services1.0.1.1
• SQLite / SQLite3.30.1
• tenable / tenable.sc5.19.0

References

• PATCHhttps://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06
• MISChttps://security.netapp.com/advisory/ntap-20191223-0001/
• VENDOR_ADVISORYhttps://www.oracle.com/security-alerts/cpuapr2020.html
• VENDOR_ADVISORYhttps://usn.ubuntu.com/4394-1/
• MISChttps://www.tenable.com/security/tns-2021-14
• MISChttps://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf