SQLite Number Processing DoS

🗓️ 02 Sep 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 17 Views

SQLite vulnerability due to number processing errors allows a remote attacker to cause service interruptions.

Reporter	Title	Published	Views	Family All 92
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in the sqlite package shipped with IBM Watson Machine Learning Community Edition (WMLCE)	20 May 202000:26	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in SQLite affects IBM Cloud Application Performance Management Response Time Monitoring Agent (CVE-2019-19925, CVE-2019-19645, CVE-2019-19924, CVE-2019-19923, CVE-2019-19880, CVE-2019-19646, CVE-2019-19926)	7 Apr 202013:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by an SQLite vulnerability	9 Oct 202016:44	–	ibm
Tenable Nessus	AlmaLinux 8 : sqlite (ALSA-2021:4396)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : sqlite (CESA-2021:4396)	11 Nov 202100:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0069)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc Multiple Vulnerabilities (crlsa-2021_4396)	1 Oct 202600:00	–	nessus
Tenable Nessus	MiracleLinux 8 : sqlite-3.26.0-15.el8 (AXSA:2021-2598:02)	20 Jan 202600:00	–	nessus

Vulners

Node

OR

hipp_wyrick_company sqliteMatch3.30.1

oracle mysql_workbenchRange≤8.0.19

canonical ubuntuMatch19.10

Source	Link
sqlite	www.sqlite.org/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-19603
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-19603
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20200429SE81
ubuntu	www.ubuntu.com/security/notices/USN-4394-1
oracle	www.oracle.com/security-alerts/cpuapr2020.html
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5/
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16

30 Sep 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 37.5

CVSS 27.8

EPSS0.10983

SQLite number processing errors remote attacker service interruptions