IM
IronMonkey Threat Research

CVE-2019-16168 MEDIUM

Published: 2019-09-09 | Last Modified: 2026-06-17 | Status: Modified

Description

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

Additional Descriptions (1)

En SQLite versiones hasta 3.29.0, la función whereLoopAddBtreeIndex en el archivo sqlite3.c puede bloquear un navegador u otra aplicación debido a la falta de comprobación de un campo sqlite_stat1 sz, también se conoce como "severe division by zero in the query planner.".

CVSS Metrics

Base Score: 6.5 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 3.6

Base Score: 4.3 (MEDIUM)

AV:N/AC:M/Au:N/C:N/I:N/A:P

Access VectorNETWORK
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 8.6

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-369
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-369

Affected Products

Vendor Product Version Update Type
sqlite sqlite * <built-in method update of dict object at 0x7fd3842113c0> Application
netapp active_iq_unified_manager * <built-in method update of dict object at 0x7fd36afa6a80> Application
netapp active_iq_unified_manager * <built-in method update of dict object at 0x7fd319c74880> Application
netapp e-series_santricity_os_controller * <built-in method update of dict object at 0x7fd319c76200> Application
netapp oncommand_insight - <built-in method update of dict object at 0x7fd384213240> Application
netapp oncommand_workflow_automation - <built-in method update of dict object at 0x7fd384210b40> Application
netapp ontap_select_deploy_administration_utility - <built-in method update of dict object at 0x7fd384e2b6c0> Application
netapp santricity_unified_manager - <built-in method update of dict object at 0x7fd3401d58c0> Application
netapp steelstore_cloud_integrated_storage - <built-in method update of dict object at 0x7fd3401d4e00> Application
canonical ubuntu_linux 12.04 <built-in method update of dict object at 0x7fd384211dc0> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x7fd36afa40c0> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x7fd36b7d4cc0> Operating System
canonical ubuntu_linux 19.04 <built-in method update of dict object at 0x7fd319c76800> Operating System
canonical ubuntu_linux 19.10 <built-in method update of dict object at 0x7fd319c77880> Operating System
fedoraproject fedora 30 <built-in method update of dict object at 0x7fd39c479700> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd369e23e00> Operating System
tenable nessus_agent * <built-in method update of dict object at 0x7fd369e20180> Application
oracle communications_design_studio 7.3.4.3.0 <built-in method update of dict object at 0x7fd319c77780> Application
oracle communications_design_studio 7.3.5.5.0 <built-in method update of dict object at 0x7fd36afa7cc0> Application
oracle communications_design_studio 7.4.0.4.0 <built-in method update of dict object at 0x7fd369eeb3c0> Application
oracle jdk 1.8.0 <built-in method update of dict object at 0x7fd319c77700> Application
oracle jre 1.8.0 <built-in method update of dict object at 0x7fd36afa7c80> Application
oracle mysql * <built-in method update of dict object at 0x7fd2a1f90040> Application
oracle outside_in_technology 8.5.4 <built-in method update of dict object at 0x7fd36b7d7c80> Application
oracle solaris 11 <built-in method update of dict object at 0x7fd384315d40> Operating System
oracle zfs_storage_appliance 8.8 <built-in method update of dict object at 0x7fd319c75640> Operating System
mcafee policy_auditor * <built-in method update of dict object at 0x7fd36b7d6400> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*
Yes cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*
Yes cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:santricity_unified_manager:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:*:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:communications_design_studio:7.3.4.3.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:communications_design_studio:7.3.5.5.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:communications_design_studio:7.4.0.4.0:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:jdk:1.8.0:update231:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:jre:1.8.0:update231:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*
Yes cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:mcafee:policy_auditor:*:*:*:*:*:*:*:*

References