IM
IronMonkey Threat Research

CVE-2019-19880 HIGH

Published: 2019-12-18 | Last Modified: 2024-11-21 | Status: Modified

Description

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.

Additional Descriptions (1)

La función exprListAppendList en el archivo window.c en SQLite versión 3.30.1, permite a atacantes desencadenar una desreferencia del puntero no válida porque los valores enteros constantes en las cláusulas ORDER BY de las definiciones de ventana son manejados inapropiadamente.

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-476

Affected Products

Vendor Product Version Update Type
sqlite sqlite 3.30.1 <built-in method update of dict object at 0x7fd340f0c480> Application
netapp cloud_backup - <built-in method update of dict object at 0x7fd340f0ec00> Application
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd340acba80> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd340f0df00> Operating System
suse package_hub - <built-in method update of dict object at 0x7fd340f0d880> Application
redhat enterprise_linux_desktop 6.0 <built-in method update of dict object at 0x7fd340f0fb80> Operating System
redhat enterprise_linux_server 6.0 <built-in method update of dict object at 0x7fd3840e5a00> Operating System
redhat enterprise_linux_workstation 6.0 <built-in method update of dict object at 0x7fd340f0ee80> Operating System
opensuse backports_sle 15.0 <built-in method update of dict object at 0x7fd340acaa80> Application
opensuse leap 15.1 <built-in method update of dict object at 0x7fd340acb680> Operating System
oracle mysql_workbench * <built-in method update of dict object at 0x7fd3703a3880> Application
siemens sinec_infrastructure_network_services * <built-in method update of dict object at 0x7fd340f0ea00> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:sqlite:sqlite:3.30.1:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:suse:package_hub:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
Yes cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

References