In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
History
07 Nov 2023, 03:05
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2019-09-09 17:15
Updated : 2024-02-28 17:08
NVD link : CVE-2019-16168
Mitre link : CVE-2019-16168
CVE.ORG link : CVE-2019-16168
JSON object : View
Products Affected
tenable
- nessus_agent
netapp
- active_iq_unified_manager
- santricity_unified_manager
- steelstore_cloud_integrated_storage
- e-series_santricity_os_controller
- oncommand_insight
- ontap_select_deploy_administration_utility
- oncommand_workflow_automation
oracle
- zfs_storage_appliance
- solaris
- jre
- jdk
- outside_in_technology
- mysql
- communications_design_studio
fedoraproject
- fedora
canonical
- ubuntu_linux
mcafee
- policy_auditor
debian
- debian_linux
sqlite
- sqlite
CWE
CWE-369
Divide By Zero