ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
References
Link | Resource |
---|---|
https://github.com/sqlite/sqlite/commit/1e490c4ca6b43a9cf8637d695907888349f69bec | Third Party Advisory |
https://github.com/sqlite/sqlite/commit/d8f2d46cbc9925e034a68aaaf60aad788d9373c1 | Patch Third Party Advisory |
https://security.netapp.com/advisory/ntap-20200204-0001/ | Third Party Advisory |
https://usn.ubuntu.com/4298-1/ | Third Party Advisory |
https://www.oracle.com/security-alerts/cpuapr2020.html | Third Party Advisory |
https://github.com/sqlite/sqlite/commit/1e490c4ca6b43a9cf8637d695907888349f69bec | Third Party Advisory |
https://github.com/sqlite/sqlite/commit/d8f2d46cbc9925e034a68aaaf60aad788d9373c1 | Patch Third Party Advisory |
https://security.netapp.com/advisory/ntap-20200204-0001/ | Third Party Advisory |
https://usn.ubuntu.com/4298-1/ | Third Party Advisory |
https://www.oracle.com/security-alerts/cpuapr2020.html | Third Party Advisory |
Configurations
History
21 Nov 2024, 04:35
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/sqlite/sqlite/commit/1e490c4ca6b43a9cf8637d695907888349f69bec - Third Party Advisory | |
References | () https://github.com/sqlite/sqlite/commit/d8f2d46cbc9925e034a68aaaf60aad788d9373c1 - Patch, Third Party Advisory | |
References | () https://security.netapp.com/advisory/ntap-20200204-0001/ - Third Party Advisory | |
References | () https://usn.ubuntu.com/4298-1/ - Third Party Advisory | |
References | () https://www.oracle.com/security-alerts/cpuapr2020.html - Third Party Advisory |
Information
Published : 2020-01-03 22:15
Updated : 2024-11-21 04:35
NVD link : CVE-2019-19959
Mitre link : CVE-2019-19959
CVE.ORG link : CVE-2019-19959
JSON object : View
Products Affected
canonical
- ubuntu_linux
sqlite
- sqlite
CWE