CVE-2019-19924 Other in n/a
An attacker can cause a denial of service in SQLite by exploiting incorrect error handling during parser-tree rewriting in window functions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-19924?
CVE-2019-19924 is a medium-severity vulnerability in Netapp Cloud Backup, published on 24 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.
Weakness: CWE-755
Which versions are affected by CVE-2019-19924?
It affects 5 products.
Products include Apache Bookkeeper, Netapp Cloud Backup, Oracle Mysql Workbench, Siemens Sinec Infrastructure Network Services, Sqlite Sqlite.
How do I fix CVE-2019-19924?
Upgrade to a fixed version.
Is CVE-2019-19924 being exploited?
There is no known exploitation of CVE-2019-19924 in the wild and no public exploit code.
Other vulnerabilities in Netapp Cloud Backup
- CVE-2019-17571 Deserialization of Untrusted Data in Log4j
- CVE-2017-6891 Memory corruption in GnuTLS libtasn1
- CVE-2020-36230 A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_elemen
- CVE-2019-19906 Memory corruption in n/a
- CVE-2020-23922 Memory corruption in n/a
Sources
Also known as DEBIAN-CVE-2019-19924, GHSA-mp99-gxqh-6752.