Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM39DBD59E71221EDCA742E62D147BC16EE4FEF1E0B97BDA4A7B97EA67D92D244C
HistoryJan 21, 2020 - 2:51 a.m.

Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2019-16168)

2020-01-2102:51:45
www.ibm.com
18

EPSS

0.004

Percentile

75.0%

JSON

Summary

SQLite is vulnerable to a denial of service, caused by missing validation of a sqlite_stat1 sz field in whereLoopAddBtreeIndex in sqlite3.c. By providing specially-crafted input, a remote attacker could exploit this vulnerability to cause the application to crash.

Vulnerability Details

CVEID:CVE-2019-16168
**DESCRIPTION:**In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a “severe division by zero in the query planner.”
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/166986 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Performance Management - Response Time Monitoring Agent 8.1.3
IBM Cloud Application Performance Management - Response Time Monitoring Agent 8.1.4
IBM Tivoli Composite Application Manager for Transactions (Response Time) 7.4.0.1
IBM Tivoli Composite Application Manager for Transactions (Response Time) 7.4.0.2

Remediation/Fixes

Product Product Version APAR Remediation / First Fix
IBM Cloud Application Performance Management - Response Time Monitoring Agent 8.1.4 If you use the Response Time Monitoring Agent, the vulnerabilities can be remediated by applying the Response Time Monitoring Agent 8.1.4.0-IBM-APM-RT-AGENT-IF0008 patch to all systems where this agent is installed:
http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FIBM+Application+Performance+Management+Advanced&fixids=8.1.4.0-IBM-APM-RT-AGENT-IF0008&source=SAR
IBM Performance Management - Response Time Monitoring Agent 8.1.3 If you use the Response Time Monitoring Agent, the vulnerabilities can be remediated by applying the Response Time Monitoring Agent 8.1.3.0-IBM-IPM-RT-AGENT-IF0006 patch to all systems where this agent is installed:
http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FIBM+Application+Performance+Management+Advanced&fixids=8.1.3.0-IBM-IPM-RT-AGENT-IF0007&source=SAR
IBM Tivoli Composite Application Manager for Transactions (Response Time) 7.4.0.1 7.4.0.1-TIV-CAMRT-IF0042
http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FTivoli+Composite+Application+Manager+for+Transactions&fixids=7.4.0.1-TIV-CAMRT-IF0042&source=SAR
IBM Tivoli Composite Application Manager for Transactions (Response Time) 7.4.0.2 7.4.0.2-TIV-CAMRT-IF0009
http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FTivoli+Composite+Application+Manager+for+Transactions&fixids=7.4.0.2-TIV-CAMRT-IF0009&source=SAR

Workarounds and Mitigations

None

Related

suse 2
nessus 35
ubuntucve 1
veracode 1
osv 5
prion 1
openvas 17
cvelist 1
nvd 1
debiancve 1
symantec 1
alpinelinux 1
cbl_mariner 1
cve 1
redhatcve 1
ibm 5
f5 1
gentoo 1
rocky 1
redhat 13
almalinux 2
photon 5
fedora 1
cloudfoundry 1
ubuntu 1
oraclelinux 1
mageia 1
kaspersky 1
amazon 1
debian 1
tenable 1
oracle 3
ics 1
suse
suse
Security update for sqlite3 (moderate)
2019-10-08 00:00:00
Security update for sqlite3 (moderate)
2019-10-08 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2019:2533-1)
2019-10-04 00:00:00
Photon OS 2.0: Sqlite PHSA-2019-2.0-0184
2019-10-25 00:00:00
SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2019:2536-1)
2019-10-04 00:00:00
ubuntucve
ubuntucve
CVE-2019-16168
2019-09-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-09-10 03:36:37
osv
osv
CVE-2019-16168
2019-09-09 17:15:13
CGA-97fj-3579-3gv7
2024-07-04 22:09:06
Moderate: mingw packages security and bug fix update
2021-05-18 06:30:39
prion
prion
Design/Logic Flaw
2019-09-09 17:15:00
openvas
openvas
SQLite 3.8.5 - 3.29.0 DoS Vulnerability
2021-06-17 00:00:00
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2019-2119)
2020-01-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:2536-1)
2021-04-19 00:00:00
cvelist
cvelist
CVE-2019-16168
2019-09-09 16:07:15
nvd
nvd
CVE-2019-16168
2019-09-09 17:15:13
debiancve
debiancve
CVE-2019-16168
2019-09-09 17:15:13
symantec
symantec
SQLite CVE-2019-16168 Denial of Service Vulnerability
2019-11-05 00:00:00
alpinelinux
alpinelinux
CVE-2019-16168
2019-09-09 17:15:13
cbl_mariner
cbl_mariner
CVE-2019-16168 affecting package ceph for versions less than 18.2.1-1
2024-04-17 22:02:46
cve
cve
CVE-2019-16168
2019-09-09 17:15:13
redhatcve
redhatcve
CVE-2019-16168
2019-11-05 17:56:14
ibm
ibm
Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment Response Time Monitoring Agent (CVE-2019-16168)
2020-02-04 06:52:30
Security Bulletin: Addressing the Sqlite Vulnerability CVE-2019-16168, CVE-2019-19242 and CVE-2019-19244
2020-03-03 14:28:29
Security Bulletin: Multiple Vulnerabilities in SQLite affects IBM Watson Studio Local
2019-12-20 14:02:58
f5
f5
K96300145 : C Library (SQLite & libxslt) vulnerabilities CVE-2019-16168 CVE-2019-13117 CVE-2019-13118
2020-01-31 00:00:00
gentoo
gentoo
SQLite: Multiple vulnerabilities
2020-03-15 00:00:00
rocky
rocky
mingw packages security and bug fix update
2021-05-18 00:00:00
redhat
redhat
(RHSA-2021:1968) Moderate: mingw packages security and bug fix update
2021-05-18 06:30:39
(RHSA-2020:4442) Moderate: sqlite security update
2020-11-03 12:04:56
(RHSA-2021:0146) Moderate: Release of OpenShift Serverless 1.12.0
2021-01-14 13:24:22
almalinux
almalinux
Moderate: mingw packages security and bug fix update
2021-05-18 06:30:39
Moderate: sqlite security update
2020-11-03 12:04:56
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0184
2019-10-23 00:00:00
Critical Photon OS Security Update - PHSA-2019-0184
2019-10-23 00:00:00
Important Photon OS Security Update - PHSA-2020-0270
2020-01-30 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: sqlite-3.26.0-7.fc30
2019-12-05 01:12:09
cloudfoundry
cloudfoundry
USN-4205-1: SQLite vulnerabilities | Cloud Foundry
2019-12-18 00:00:00
ubuntu
ubuntu
SQLite vulnerabilities
2019-12-02 00:00:00
oraclelinux
oraclelinux
sqlite security update
2020-11-10 00:00:00
mageia
mageia
Updated sqlite3 packages fix security vulnerabilities
2020-01-30 21:28:34
kaspersky
kaspersky
KLA11646 Multiple vulnerabilities in Oracle JRE
2020-01-05 00:00:00
amazon
amazon
Important: java-11-amazon-corretto
2020-01-14 23:07:00
debian
debian
[SECURITY] [DLA 2340-1] sqlite3 security update
2020-08-22 22:34:41
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

EPSS

0.004

Percentile

75.0%

JSON
Related for 39DBD59E71221EDCA742E62D147BC16EE4FEF1E0B97BDA4A7B97EA67D92D244C
suse2nessus35ubuntucve1veracode1osv5prion1openvas17cvelist1nvd1debiancve1symantec1alpinelinux1cbl_mariner1cve1redhatcve1ibm5f51gentoo1rocky1redhat13almalinux2photon5fedora1cloudfoundry1ubuntu1oraclelinux1mageia1kaspersky1amazon1debian1tenable1oracle3ics1