PT-2019-4848

🗓️ 09 Dec 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs

Type determination error in SQLite allows self-referential views to cause infinite recursion DoS.

Reporter	Title	Published	Views	Family All 365
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in the sqlite package shipped with IBM Watson Machine Learning Community Edition (WMLCE)	20 May 202000:26	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in SQLite affects IBM Cloud Application Performance Management Response Time Monitoring Agent (CVE-2019-19925, CVE-2019-19645, CVE-2019-19924, CVE-2019-19923, CVE-2019-19880, CVE-2019-19646, CVE-2019-19926)	7 Apr 202013:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Aug 202122:15	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: WML CE: WML CE: SQLite through 3.32.0 has various security issues.	17 Jul 202022:52	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability was identified and remediated in the IBM MaaS360 Cloud Extender (CVE-2020-13434, CVE-2020-13435)	16 Mar 202106:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Verify Access	7 Jan 202200:24	–	ibm
IBM Security Bulletins	Security Bulletin: WML CE: SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.	20 Jul 202020:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by an SQLite vulnerability	9 Oct 202016:44	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2019-19645
tenable	www.tenable.com/security/tns-2021-14
cve	www.cve.org/CVERecord
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5
suse	www.suse.com/security/cve/CVE-2018-8740
osv	www.osv.dev/vulnerability/openSUSE-SU-2021:1058-1
osv	www.osv.dev/vulnerability/SUSE-SU-2021:3215-1
suse	www.suse.com/security/cve/CVE-2019-20218
bugzilla	www.bugzilla.suse.com/1172236
ubuntu	www.ubuntu.com/security/CVE-2020-11655

15 Apr 2022 00:00Current

CVSS 3.15.5 - 9.8

CVSS 27.5

EPSS0.05376

SQLite type determination error self-referential views ALTER TABLE infinite recursion denial of service