← Back

CVE-2019-8457

nvd nist
Published: May 30, 2019Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.

Affected (9)

Products: Sqlite: Sqlite · Canonical: Ubuntu Linux · Fedoraproject: Fedora · +1 more
Show all products
Sqlite: Sqlite · Canonical: Ubuntu Linux · Fedoraproject: Fedora · Opensuse: Leap
Sqlite
1 product
Sqlite
Canonical
1 product
Ubuntu Linux
Fedoraproject
1 product
Fedora
Opensuse
1 product
Leap
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Sqlite
From 3.6.0 to 3.27.2
Configuration B
8 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 18.10
Ubuntu Linux
Version 19.04
Fedoraproject
Fedora
Version 29
Fedora
Version 30
Leap
Version 42.3

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (30)

Source: cve@checkpoint.com
Third Party Advisory
Source: cve@checkpoint.com
Source: cve@checkpoint.com
Source: cve@checkpoint.com
Source: cve@checkpoint.com
Third Party Advisory
Source: cve@checkpoint.com
Third Party Advisory
Source: cve@checkpoint.com
Third Party Advisory
Source: cve@checkpoint.com
Third Party Advisory
Source: cve@checkpoint.com
Third Party Advisory
Source: cve@checkpoint.com
Source: cve@checkpoint.com
Source: cve@checkpoint.com
Source: cve@checkpoint.com
PatchThird Party Advisory
Source: cve@checkpoint.com
Release NotesVendor Advisory
Source: cve@checkpoint.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.