CVE-2019-16168

תיאור (מקור, אנגלית)

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

מדדים

CVSS 3.1

6.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS — סבירות ניצול

4% (אחוזון 100) נכון ל-15/10/2026

CWE

CWE-369

מוצרים מושפעים

sqlite: sqlite; netapp: active iq unified manager; netapp: e-series santricity os controller; netapp: oncommand insight; netapp: oncommand workflow automation; netapp: ontap select deploy administration utility; netapp: santricity unified manager; netapp: steelstore cloud integrated storage; canonical: ubuntu linux; fedoraproject: fedora; debian: debian linux; tenable: nessus agent; oracle: communications design studio; oracle: jdk; oracle: jre

קישורים

• https://www.sqlite.org/src/info/e4598ecbdd18bd82945f6029013296690e719a62 Vendor Advisory
• https://www.sqlite.org/src/timeline?c=98357d8c1263920b PatchVendor Advisory
• https://www.sqlite.org/src/info/e4598ecbdd18bd82945f6029013296690e719a62 Vendor Advisory
• https://www.sqlite.org/src/timeline?c=98357d8c1263920b PatchVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00032.html Broken Link
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00033.html Broken Link
• https://kc.mcafee.com/corporate/index?page=content&id=SB10365 Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html Mailing ListThird Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap‮…
• https://security.gentoo.org/glsa/202003-16 Third Party Advisory