CVEvulnerability
CVE-2019-16168
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-09-09
- Last modified
- 2026-10-14
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-369
Description
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
Affected configurations
• sqlite sqlite (>= 3.8.5 <= 3.29.0)
• netapp active iq unified manager (>= 7.3)
• netapp active iq unified manager (>= 9.5)
• netapp e-series santricity os controller (>= 11.0.0 <= 11.60.3)
• netapp oncommand insight
• netapp oncommand workflow automation
• netapp ontap select deploy administration utility
• netapp santricity unified manager
• netapp steelstore cloud integrated storage
• canonical ubuntu linux 12.04
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• canonical ubuntu linux 19.04
• canonical ubuntu linux 19.10
• fedoraproject fedora 30
• debian debian linux 9.0
• tenable nessus agent (<= 8.2.3)
• oracle communications design studio 7.3.4.3.0
• oracle communications design studio 7.3.5.5.0
• oracle communications design studio 7.4.0.4.0
• oracle jdk 1.8.0
• oracle jre 1.8.0
• oracle mysql (>= 8.0.0 <= 8.0.18)
• oracle outside in technology 8.5.4
• oracle solaris 11
• oracle zfs storage appliance 8.8
• mcafee policy auditor (< 6.5.1)
Related
Weakness · CWE (1)
- CWE-369 Divide By Zero weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00032.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00033.html Broken Link
- https://kc.mcafee.com/corporate/index?page=content&id=SB10365 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZARJHJJDBHI7CE5PZEBXS5HKK6HXKW2/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202003-16 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190926-0003/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200122-0003/ Third Party Advisory
- https://usn.ubuntu.com/4205-1/ Third Party Advisory
- https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg116312.html www.mail-archive.com
- https://www.oracle.com/security-alerts/cpuapr2020.html Third Party Advisory
- https://www.oracle.com/security-alerts/cpujan2020.html Third Party Advisory
- https://www.sqlite.org/src/info/e4598ecbdd18bd82945f6029013296690e719a62 Vendor Advisory
- https://www.sqlite.org/src/timeline?c=98357d8c1263920b Patch, Vendor Advisory
- https://www.tenable.com/security/tns-2021-08 Third Party Advisory
- https://www.tenable.com/security/tns-2021-11 Third Party Advisory
- https://www.tenable.com/security/tns-2021-14 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00032.html Broken Link
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00033.html Broken Link
- https://kc.mcafee.com/corporate/index?page=content&id=SB10365 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZARJHJJDBHI7CE5PZEBXS5HKK6HXKW2/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202003-16 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190926-0003/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200122-0003/ Third Party Advisory
- https://usn.ubuntu.com/4205-1/ Third Party Advisory
- https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg116312.html www.mail-archive.com
- https://www.oracle.com/security-alerts/cpuapr2020.html Third Party Advisory
- https://www.oracle.com/security-alerts/cpujan2020.html Third Party Advisory
- https://www.sqlite.org/src/info/e4598ecbdd18bd82945f6029013296690e719a62 Vendor Advisory
- https://www.sqlite.org/src/timeline?c=98357d8c1263920b Patch, Vendor Advisory
- https://www.tenable.com/security/tns-2021-08 Third Party Advisory
- https://www.tenable.com/security/tns-2021-11 Third Party Advisory
- https://www.tenable.com/security/tns-2021-14 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html cert-portal.siemens.com