The vulnerability of the sqlite3WindowRewrite() function in the SQLite database management system, related to insufficient handling of exception states, allows a attacker to compromise data integrity.

🗓️ 13 Apr 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

SQLite sqlite3WindowRewrite risks data integrity from exception handling and syntax analysis flaws.

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in the sqlite package shipped with IBM Watson Machine Learning Community Edition (WMLCE)	20 May 202000:26	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in SQLite affects IBM Cloud Application Performance Management Response Time Monitoring Agent (CVE-2019-19925, CVE-2019-19645, CVE-2019-19924, CVE-2019-19923, CVE-2019-19880, CVE-2019-19646, CVE-2019-19926)	7 Apr 202013:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by an SQLite vulnerability	9 Oct 202016:44	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0111: sqlite (ALINUX3-SA-2022:0111)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : sqlite (CESA-2020:1810)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : sqlite (EulerOS-SA-2020-1132)	24 Feb 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1180)	25 Feb 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : sqlite (EulerOS-SA-2020-1364)	2 Apr 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : sqlite (EulerOS-SA-2020-1434)	15 Apr 202000:00	–	nessus

Vulners

Node

hipp_wyrick_company sqliteRange≤3.30.1

OR

novell opensuse_leapMatch15.1

OR

canonical ubuntuMatch19.10

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-19924
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-19924
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20200327SE16
people	www.people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-19224
suse	www.suse.com/security/cve/CVE-2019-19224
github	www.github.com/sqlite/sqlite/commit/57f7ece78410a8aae86aa4625fb7556897db384c
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20200429SE81
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5/

21 Nov 2022 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25

CVSS 35.3

EPSS0.06298

sqlite window rewrite exception handling syntax analysis data integrity