CVE-2019-19645 — Uncontrolled Recursion in Sqlite
Severity
5.5MEDIUMNVD
EPSS
0.4%
top 39.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Latest updateMay 24
Description
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages5 packages
Patches
🔴Vulnerability Details
4📋Vendor Advisories
4Microsoft▶
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.↗2019-12-10
Red Hat▶
sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements↗2019-12-09
Debian▶
CVE-2019-19645: sqlite3 - alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion ...↗2019
💬Community
4Bugzilla▶
CVE-2019-19645 mingw-sqlite: sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements [fedora-all]↗2019-12-13
Bugzilla▶
CVE-2019-19645 sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements [fedora-all]↗2019-12-13
Bugzilla▶
CVE-2019-19645 sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements↗2019-12-13
Bugzilla▶
CVE-2019-19645 mingw-sqlite: sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements [epel-7]↗2019-12-13