The vulnerability of the rtreenode() function in the SQLite database management system allows a attacker to cause a service failure, execute arbitrary code, or disclose sensitive information.

🗓️ 29 Oct 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The rtreenode vulnerability in SQLite allows service failure, arbitrary code execution, or data disclosure due to reading outside the buffer.

Reporter	Title	Published	Views	Family All 131
IBM Security Bulletins	Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2019-8457)	10 Oct 201907:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in SQLite affects IBM Watson Studio Local	20 Dec 201914:02	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in SQLite shipped with PowerAI Vision	8 Jan 202004:41	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in SQLite shipped with PowerAI	22 Jan 202011:10	–	ibm
IBM Security Bulletins	Security Bulletin: Public disclosed vulnerability from SQLite CVE-2019-8457	5 Aug 201919:07	–	ibm
FreeBSD	MySQL -- Multiple vulerabilities	14 Jan 202000:00	–	freebsd
Tenable Nessus	Alibaba Cloud Linux 3 : 0111: sqlite (ALINUX3-SA-2022:0111)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : sqlite (CESA-2020:1810)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2019-1814)	27 Aug 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : sqlite (EulerOS-SA-2019-1991)	24 Sep 201900:00	–	nessus

Vulners

Node

novell suse_enterprise_storageMatch4

OR

novell suse_openstack_cloudMatch7

OR

novell suse_caas_platformMatch3.0

OR

novell openstack_cloud_magnum_orchestrationMatch7

OR

hipp_wyrick_company sqliteRange3.6.0–3.27.2

OR

sun solarisMatch10

OR

novell opensuse_leapMatch42.3

OR

canonical ubuntuMatch18.10

OR

fedora fedoraMatch29

OR

canonical ubuntuMatch19.04

OR

red_hat red_hat_enterprise_linuxMatch8

OR

novell opensuse_leapMatch15.0

OR

novell suse_linux_enterprise_serverMatch12-ltss

OR

novell suse_linux_enterprise_server_for_sap_applicationsMatch12-ltss

OR

fedora fedoraMatch30

Source	Link
oracle	www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-8457
sqlite	www.sqlite.org/src/info/90acdbfce9c08858
people	www.people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-8457.html
suse	www.suse.com/security/cve/CVE-2019-8457/
access	www.access.redhat.com/security/cve/cve-2019-8457
wiki	www.wiki.astralinux.ru/pages/viewpage.action
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-8457
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20200429SE81
wiki	www.wiki.astralinux.ru/astra-linux-se15-bulletin-20201201SE

19 Mar 2025 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 39.8

CVSS 210

EPSS0.30735

sqlite rtreenode buffer read outside memory vulnerability arbitrary code service disruption