Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2019-16168
HistorySep 09, 2019 - 5:15 p.m.

CVE-2019-16168

2019-09-0917:15:13
CWE-369
[email protected]
web.nvd.nist.gov
329
9
sqlite
3.29.0
whereloopaddbtreeindex
sqlite3.c
crash
division by zero
query planner

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a “severe division by zero in the query planner.”

Affected configurations

NVD
Node
sqlitesqliteRange3.8.5–3.29.0
Node
netappactive_iq_unified_managerRange7.3≥windows
OR
netappactive_iq_unified_managerRange9.5≥vmware_vsphere
OR
netappe-series_santricity_os_controllerRange11.0.0–11.60.3
OR
netapponcommand_insightMatch-
OR
netapponcommand_workflow_automationMatch-
OR
netappontap_select_deploy_administration_utilityMatch-
OR
netappsantricity_unified_managerMatch-
OR
netappsteelstore_cloud_integrated_storageMatch-
Node
canonicalubuntu_linuxMatch12.04
OR
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch19.04
OR
canonicalubuntu_linuxMatch19.10
Node
fedoraprojectfedoraMatch30
Node
debiandebian_linuxMatch9.0
Node
tenablenessus_agentRange≤8.2.3
Node
oraclecommunications_design_studioMatch7.3.4.3.0
OR
oraclecommunications_design_studioMatch7.3.5.5.0
OR
oraclecommunications_design_studioMatch7.4.0.4.0
OR
oraclejdkMatch1.8.0update231
OR
oraclejreMatch1.8.0update231
OR
oraclemysqlRange8.0.0–8.0.18
OR
oracleoutside_in_technologyMatch8.5.4
OR
oraclesolarisMatch11
OR
oraclezfs_storage_applianceMatch8.8
Node
mcafeepolicy_auditorRange<6.5.1
CPENameOperatorVersion
sqlite:sqlitesqlitele3.29.0

References

Social References

More

Related

nessus 34
ubuntucve 1
cvelist 1
osv 3
suse 2
prion 1
openvas 17
veracode 1
nvd 1
debiancve 1
symantec 1
cbl_mariner 1
alpinelinux 1
ibm 6
redhatcve 1
gentoo 1
f5 1
redhat 13
almalinux 2
rocky 1
fedora 1
photon 4
cloudfoundry 1
ubuntu 1
mageia 1
oraclelinux 1
amazon 1
kaspersky 1
debian 1
tenable 1
oracle 3
ics 1
nessus
nessus
SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2019:2533-1)
2019-10-04 00:00:00
SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2019:2536-1)
2019-10-04 00:00:00
Fedora 30 : sqlite (2019-b1636e0b70)
2019-12-05 00:00:00
ubuntucve
ubuntucve
CVE-2019-16168
2019-09-09 00:00:00
cvelist
cvelist
CVE-2019-16168
2019-09-09 16:07:15
osv
osv
CVE-2019-16168
2019-09-09 17:15:13
Moderate: mingw packages security and bug fix update
2021-05-18 06:30:39
sqlite3 - security update
2020-08-22 00:00:00
suse
suse
Security update for sqlite3 (moderate)
2019-10-08 00:00:00
Security update for sqlite3 (moderate)
2019-10-08 00:00:00
prion
prion
Design/Logic Flaw
2019-09-09 17:15:00
openvas
openvas
SQLite 3.8.5 - 3.29.0 DoS Vulnerability
2021-06-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:2536-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2019-2119)
2020-01-23 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-09-10 03:36:37
nvd
nvd
CVE-2019-16168
2019-09-09 17:15:13
debiancve
debiancve
CVE-2019-16168
2019-09-09 17:15:13
symantec
symantec
SQLite CVE-2019-16168 Denial of Service Vulnerability
2019-11-05 00:00:00
cbl_mariner
cbl_mariner
CVE-2019-16168 affecting package ceph for versions less than 18.2.1-1
2024-04-17 22:02:46
alpinelinux
alpinelinux
CVE-2019-16168
2019-09-09 17:15:13
ibm
ibm
Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment Response Time Monitoring Agent (CVE-2019-16168)
2020-02-04 06:52:30
Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2019-16168)
2020-01-21 02:51:45
Security Bulletin: Addressing the Sqlite Vulnerability CVE-2019-16168, CVE-2019-19242 and CVE-2019-19244
2020-03-03 14:28:29
redhatcve
redhatcve
CVE-2019-16168
2019-11-05 17:56:14
gentoo
gentoo
SQLite: Multiple vulnerabilities
2020-03-15 00:00:00
f5
f5
K96300145 : C Library (SQLite & libxslt) vulnerabilities CVE-2019-16168 CVE-2019-13117 CVE-2019-13118
2020-01-31 00:00:00
redhat
redhat
(RHSA-2021:1968) Moderate: mingw packages security and bug fix update
2021-05-18 06:30:39
(RHSA-2020:4442) Moderate: sqlite security update
2020-11-03 12:04:56
(RHSA-2021:0146) Moderate: Release of OpenShift Serverless 1.12.0
2021-01-14 13:24:22
almalinux
almalinux
Moderate: mingw packages security and bug fix update
2021-05-18 06:30:39
Moderate: sqlite security update
2020-11-03 12:04:56
rocky
rocky
mingw packages security and bug fix update
2021-05-18 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: sqlite-3.26.0-7.fc30
2019-12-05 01:12:09
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0184
2019-10-23 00:00:00
Critical Photon OS Security Update - PHSA-2019-0184
2019-10-23 00:00:00
Critical Photon OS Security Update - PHSA-2019-0036
2019-10-23 00:00:00
cloudfoundry
cloudfoundry
USN-4205-1: SQLite vulnerabilities | Cloud Foundry
2019-12-18 00:00:00
ubuntu
ubuntu
SQLite vulnerabilities
2019-12-02 00:00:00
mageia
mageia
Updated sqlite3 packages fix security vulnerabilities
2020-01-30 21:28:34
oraclelinux
oraclelinux
sqlite security update
2020-11-10 00:00:00
amazon
amazon
Important: java-11-amazon-corretto
2020-01-14 23:07:00
kaspersky
kaspersky
KLA11646 Multiple vulnerabilities in Oracle JRE
2020-01-05 00:00:00
debian
debian
[SECURITY] [DLA 2340-1] sqlite3 security update
2020-08-22 22:34:41
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.8%

JSON
Related for CVE-2019-16168
nessus34ubuntucve1cvelist1osv3suse2prion1openvas17veracode1nvd1debiancve1symantec1cbl_mariner1alpinelinux1ibm6redhatcve1gentoo1f51redhat13almalinux2rocky1fedora1photon4cloudfoundry1ubuntu1mageia1oraclelinux1amazon1kaspersky1debian1tenable1oracle3ics1