IM
IronMonkey Threat Research

CVE-2019-19923 HIGH

Published: 2019-12-24 | Last Modified: 2024-11-21 | Status: Modified

Description

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

Additional Descriptions (1)

La función flattenSubquery en el archivo select.c en SQLite versión 3.30.1 maneja inapropiadamente ciertos usos de SELECT DISTINCT que involucra una LEFT JOIN en la que el lado derecho es una vista. Esto puede causar una desreferencia del puntero NULL (o resultados incorrectos).

CVSS Metrics

Base Score: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 3.6

Base Score: 5.0 (MEDIUM)

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access VectorNETWORK
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 2.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-476

Affected Products

Vendor Product Version Update Type
sqlite sqlite 3.30.1 <built-in method update of dict object at 0x7fd36071dbc0> Application
siemens sinec_infrastructure_network_services * <built-in method update of dict object at 0x7fd3423dab00> Application
oracle mysql_workbench * <built-in method update of dict object at 0x7fd2d3af4240> Application
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd384688e80> Operating System
debian debian_linux 10.0 <built-in method update of dict object at 0x7fd36071eec0> Operating System
redhat enterprise_linux_desktop 6.0 <built-in method update of dict object at 0x7fd3423d8340> Operating System
redhat enterprise_linux_server 6.0 <built-in method update of dict object at 0x7fd3423d8880> Operating System
redhat enterprise_linux_workstation 6.0 <built-in method update of dict object at 0x7fd2dbe0c940> Operating System
suse package_hub - <built-in method update of dict object at 0x7fd2dbe0e840> Application
opensuse backports_sle 15.0 <built-in method update of dict object at 0x7fd2d3af7640> Application
opensuse leap 15.1 <built-in method update of dict object at 0x7fd36067a840> Operating System
netapp cloud_backup - <built-in method update of dict object at 0x7fd360679440> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:sqlite:sqlite:3.30.1:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:suse:package_hub:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
Yes cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

References