In SQLite through 3.29.0 whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field aka a "severe division by zero in the query planner."

🗓️ 30 Jun 2024 14:00:00Reported by MicrosoftType

SQLite before 3.29.0 crashes from missing sqlite_stat1 size validation in whereLoopAddBtreeIndex.

Reporter	Title	Published	Views	Family All 211
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2019-16168)	21 Jan 202002:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in SQLite affects IBM Watson Studio Local	20 Dec 201914:02	–	ibm
IBM Security Bulletins	Security Bulletin: Addressing the Sqlite Vulnerability CVE-2019-16168, CVE-2019-19242 and CVE-2019-19244	3 Mar 202014:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	25 Sep 202517:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affects IBM Engineering Requirements Management DOORS Next	18 Jun 202021:10	–	ibm
IBM Security Bulletins	Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment Response Time Monitoring Agent (CVE-2019-16168)	4 Feb 202006:52	–	ibm
Tenable Nessus	Amazon Linux 2 : java-11-amazon-corretto (ALAS-2020-1387)	21 Jan 202000:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0111: sqlite (ALINUX3-SA-2022:0111)	14 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0121: mingw packages (ALINUX3-SA-2022:0121)	14 May 202500:00	–	nessus