CVE-2019-19317 — Incorrect Conversion between Numeric Types in Sqlite
Severity
9.8CRITICALNVD
EPSS
1.0%
top 23.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 5
Latest updateMay 24
Description
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages3 packages
Patches
🔴Vulnerability Details
2📋Vendor Advisories
3Microsoft▶
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other i↗2019-12-10
Debian▶
CVE-2019-19317: sqlite3 - lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in ...↗2019
💬Community
4Bugzilla▶
CVE-2019-19317 mingw-sqlite: sqlite: omits bits from the colUsed bitmask in the case of a generated column [fedora-all]↗2019-12-16
Bugzilla▶
CVE-2019-19317 mingw-sqlite: sqlite: omits bits from the colUsed bitmask in the case of a generated column [epel-7]↗2019-12-16
Bugzilla▶
CVE-2019-19317 sqlite: omits bits from the colUsed bitmask in the case of a generated column↗2019-12-16
Bugzilla▶
CVE-2019-19317 sqlite: omits bits from the colUsed bitmask in the case of a generated column [fedora-all]↗2019-12-16