CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
90.4%
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).
Vendor | Product | Version | CPE |
---|---|---|---|
sqlite | sqlite | * | cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:* |
apple | iphone_os | * | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
apple | mac_os_x | * | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
apple | watchos | * | cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
apple | icloud | * | cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:* |
apple | itunes | * | cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:* |
microsoft | windows | - | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
seclists.org/fulldisclosure/2019/Jan/62
seclists.org/fulldisclosure/2019/Jan/64
seclists.org/fulldisclosure/2019/Jan/66
seclists.org/fulldisclosure/2019/Jan/67
seclists.org/fulldisclosure/2019/Jan/68
seclists.org/fulldisclosure/2019/Jan/69
www.securityfocus.com/bid/106698
seclists.org/bugtraq/2019/Jan/28
seclists.org/bugtraq/2019/Jan/29
seclists.org/bugtraq/2019/Jan/31
seclists.org/bugtraq/2019/Jan/32
seclists.org/bugtraq/2019/Jan/33
seclists.org/bugtraq/2019/Jan/39
security.netapp.com/advisory/ntap-20190502-0004/
sqlite.org/src/info/1a84668dcfdebaf12415d
support.apple.com/kb/HT209443
support.apple.com/kb/HT209446
support.apple.com/kb/HT209447
support.apple.com/kb/HT209448
support.apple.com/kb/HT209450
support.apple.com/kb/HT209451
usn.ubuntu.com/4019-1/
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
90.4%