ZeroHour

CVE-2019-19926

CVSS 3.1
7.5 high
EPSS
7%p94
Published
()
Modified
Description

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.

Vendors
sqlitesiemensoracledebianredhatopensusesusenetapp
Products
sqlite, sinec infrastructure network services, mysql workbench, debian linux, enterprise linux desktop, enterprise linux server, enterprise linux workstation, backports sle, leap, package hub, cloud backup
Weakness
CWE-476
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.