CVE-2019-19646

Published: Dec 9, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

Affected (6)

Products: Sqlite: Sqlite · Siemens: Sinec Infrastructure Network Services · Tenable: Tenable.sc · +2 more

Show all products

Sqlite: Sqlite · Siemens: Sinec Infrastructure Network Services · Tenable: Tenable.sc · Oracle: Mysql Workbench · Netapp: Cloud Backup, Ontap Select Deploy Administration Utility

Sqlite

1 product

Sqlite

Siemens

1 product

Sinec Infrastructure Network Services

1 product

1 product

2 products

Ontap Select Deploy Administration Utility

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sqlite Sqlite	Up to 3.30.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Siemens Sinec Infrastructure Network Services	Before 1.0.1.1

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Tenable Tenable.sc	Before 5.19.0

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql Workbench	Up to 8.0.19

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Netapp Cloud Backup	All versions
Netapp Ontap Select Deploy Administration Utility	All versions

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (14)

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3

Source: cve@mitre.org

Third Party Advisory

https://github.com/sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd

Source: cve@mitre.org

PatchThird Party Advisory

https://security.netapp.com/advisory/ntap-20191223-0001/

Source: cve@mitre.org

Third Party Advisory

https://www.oracle.com/security-alerts/cpuapr2020.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.sqlite.org/

Source: cve@mitre.org

Vendor Advisory

https://www.tenable.com/security/tns-2021-14

Source: cve@mitre.org

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf