Vulnerability CVE-2019-19645: Information

Description

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2019-19645
Published: Dec. 9, 2019
Modified: April 15, 2022
Error type identifier: CWE-674

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
mysql-workbench-communitysisyphus8.0.20-alt18.0.33-alt2.2ALT-PU-2020-2094-1252776Fixed
mysql-workbench-communityp108.0.20-alt18.0.25-alt2ALT-PU-2020-2094-1252776Fixed
mysql-workbench-communityp98.0.20-alt18.0.25-alt2ALT-PU-2020-2183-1252777Fixed
mysql-workbench-communityc10f18.0.20-alt18.0.25-alt2ALT-PU-2020-2094-1252776Fixed
mysql-workbench-communityc9f28.0.20-alt18.0.25-alt3ALT-PU-2020-2183-1252777Fixed
mysql-workbench-communityp118.0.20-alt18.0.33-alt2.2ALT-PU-2020-2094-1252776Fixed
sqlite3sisyphus3.31.0-alt13.44.2-alt1ALT-PU-2020-1088-1244880Fixed
sqlite3p103.31.0-alt13.35.5-alt1.p10.1ALT-PU-2020-1088-1244880Fixed
sqlite3p93.33.0-alt13.33.0-alt1ALT-PU-2020-2898-1258834Fixed
sqlite3c10f13.31.0-alt13.35.5-alt1.p10.1ALT-PU-2020-1088-1244880Fixed
sqlite3c9f23.33.0-alt13.36.0-alt2ALT-PU-2020-2898-1258834Fixed
sqlite3p113.31.0-alt13.44.2-alt1ALT-PU-2020-1088-1244880Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06
  • Patch
  • Third Party Advisory
https://security.netapp.com/advisory/ntap-20191223-0001/
  • Third Party Advisory
N/A
  • Patch
  • Third Party Advisory
USN-4394-1
  • Third Party Advisory
https://www.tenable.com/security/tns-2021-14
  • Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
  • Patch
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*
      End including
      3.30.1

      Configuration 2

      cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
      cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

      Configuration 3

      cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*
      End including
      8.0.19

      Configuration 4

      cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*
      End excliding
      5.19.0

      Configuration 5

      cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*
      End excliding
      1.0.1.1
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v24.5.2
Back to top