CVE-2019-16168
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 4.2%
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Produtos afetados
n/a · n/aReferências
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00032.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-10/msg00033.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-398330.htmlhttps://kc.mcafee.com/corporate/index?page=content&id=SB10365https://lists.debian.org/debian-lts-announce/2020/08/msg00037.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZARJHJJDBHI7CE5PZEBXS5HKK6HXKW2/https://security.gentoo.org/glsa/202003-16https://security.netapp.com/advisory/ntap-20190926-0003/https://security.netapp.com/advisory/ntap-20200122-0003/https://usn.ubuntu.com/4205-1/https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg116312.htmlhttps://www.oracle.com/security-alerts/cpuapr2020.html