CVE-2019-16168

Published: Sep 9, 2019Modified: May 28, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

Affected (27)

Products: Sqlite: Sqlite · Netapp: Active Iq Unified Manager, E Series Santricity Os Controller, Oncommand Insight, Oncommand Workflow Automation, Ontap Select Deploy Administration Utility, Santricity Unified Manager, Steelstore Cloud Integrated Storage · Canonical: Ubuntu Linux · +5 more

Show all products

1 product

7 products

Active Iq Unified Manager

E Series Santricity Os Controller

Oncommand Insight

Oncommand Workflow Automation

Ontap Select Deploy Administration Utility

Santricity Unified Manager

Steelstore Cloud Integrated Storage

1 product

1 product

1 product

1 product

7 products

Communications Design Studio

Outside In Technology

Zfs Storage Appliance

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sqlite Sqlite	From 3.8.5 to 3.29.0

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	From 9.5
Netapp Active Iq Unified Manager	From 7.3
Netapp E Series Santricity Os Controller	From 11.0.0 to 11.60.3
Netapp Oncommand Insight	All versions
Netapp Oncommand Workflow Automation	All versions
Netapp Ontap Select Deploy Administration Utility	All versions
Netapp Santricity Unified Manager	All versions
Netapp Steelstore Cloud Integrated Storage	All versions

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 19.04
Canonical Ubuntu Linux	Version 19.10

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 30

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 9.0

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Tenable Nessus Agent	Up to 8.2.3

Configuration G

9 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Design Studio	Version 7.3.4.3.0
Oracle Communications Design Studio	Version 7.3.5.5.0
Oracle Communications Design Studio	Version 7.4.0.4.0
Oracle Jdk	Version 1.8.0 update231
Oracle Jre	Version 1.8.0 update231
Oracle Mysql	From 8.0.0 to 8.0.18
Oracle Outside In Technology	Version 8.5.4
Oracle Solaris	Version 11
Oracle Zfs Storage Appliance	Version 8.8

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Policy Auditor	Before 6.5.1

Related CWEs

The product divides a value by zero.

References (34)

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00032.html

Source: cve@mitre.org

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00033.html

Source: cve@mitre.org

Broken Link

https://kc.mcafee.com/corporate/index?page=content&id=SB10365

Source: cve@mitre.org

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZARJHJJDBHI7CE5PZEBXS5HKK6HXKW2/

Source: cve@mitre.org

https://security.gentoo.org/glsa/202003-16

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190926-0003/

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200122-0003/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/4205-1/

Source: cve@mitre.org

Third Party Advisory

https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg116312.html

Source: cve@mitre.org

https://www.oracle.com/security-alerts/cpuapr2020.html

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2020.html

Source: cve@mitre.org

Third Party Advisory

https://www.sqlite.org/src/info/e4598ecbdd18bd82945f6029013296690e719a62

Source: cve@mitre.org

Vendor Advisory

https://www.sqlite.org/src/timeline?c=98357d8c1263920b

Source: cve@mitre.org

PatchVendor Advisory

https://www.tenable.com/security/tns-2021-08

Source: cve@mitre.org

Third Party Advisory

https://www.tenable.com/security/tns-2021-11

Source: cve@mitre.org

Third Party Advisory

https://www.tenable.com/security/tns-2021-14

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00032.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00033.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://kc.mcafee.com/corporate/index?page=content&id=SB10365

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZARJHJJDBHI7CE5PZEBXS5HKK6HXKW2/

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202003-16

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190926-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200122-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/4205-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg116312.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.oracle.com/security-alerts/cpuapr2020.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2020.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.sqlite.org/src/info/e4598ecbdd18bd82945f6029013296690e719a62

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.sqlite.org/src/timeline?c=98357d8c1263920b

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.tenable.com/security/tns-2021-08

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.tenable.com/security/tns-2021-11

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.tenable.com/security/tns-2021-14

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.