CVE-2019-19317 Denial of service in n/a

Critical 9.8 Published 5 Dec 2019 Updated 14 Oct 2026

Attackers can cause a denial of service in SQLite by exploiting a bitmask omission in generated column resolution.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2019-19317?

CVE-2019-19317 is a critical denial of service vulnerability in Netapp Cloud Backup, published on 5 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

Weakness: CWE-681

Which versions are affected by CVE-2019-19317?

It affects 5 products.

Products include Netapp Cloud Backup, Netapp Ontap Select Deploy Administration Utility, Oracle Mysql Workbench, Siemens Sinec Infrastructure Network Services, Sqlite Sqlite.

How do I fix CVE-2019-19317?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2019-19317 being exploited?

There is no known exploitation of CVE-2019-19317 in the wild and no public exploit code.

All Netapp Cloud Backup vulnerabilities

Sources

Also known as GHSA-6283-q875-5qpp.