sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
La función sqlite3Select en el archivo select.c en SQLite versión 3.30.1, permite un bloqueo si una sub-selección utiliza las funciones DISTINCT y window, y también tiene cierto uso ORDER BY.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
NVD-CWE-noinfo
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| sqlite | sqlite | 3.30.1 | <built-in method update of dict object at 0x7fd340be74c0> | Application |
| canonical | ubuntu_linux | 19.04 | <built-in method update of dict object at 0x7fd384e0f680> | Operating System |
| canonical | ubuntu_linux | 19.10 | <built-in method update of dict object at 0x7fd384e0c580> | Operating System |
| oracle | mysql_workbench | * | <built-in method update of dict object at 0x7fd36ad4e540> | Application |
| siemens | sinec_infrastructure_network_services | * | <built-in method update of dict object at 0x7fd340be5cc0> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:sqlite:sqlite:3.30.1:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:* |