7.5

CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sqlite ≫ Sqlite Version 3.30.1
Netapp ≫ Cloud Backup Version -
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Suse ≫ Package Hub Version -
   Suse ≫ Linux Enterprise Version 12.0
Opensuse ≫ Backports Sle Version 15.0 Update sp1
Opensuse ≫ Leap Version 15.1
Oracle ≫ Mysql Workbench Version <= 8.0.19
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.94% 0.933
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.oracle.com/security-alerts/cpuapr2020.html
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.html
Third Party Advisory
Mailing List
https://access.redhat.com/errata/RHSA-2020:0514
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Patch
Third Party Advisory
https://usn.ubuntu.com/4298-1/
Broken Link
https://github.com/sqlite/sqlite/commit/75e95e1fcd52d3ec8282edb75ac8cd0814095d54
Patch
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200114-0001/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4638
Third Party Advisory