3.30.1 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:sqlite:sqlite:3.30.1:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2019-20218			2020-01-02	2022-10-07	5.0	None	Remote	Low	Not required	None	None	Partial
selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.
2	CVE-2019-19959			2020-01-03	2020-11-09	5.0	None	Remote	Low	Not required	None	Partial	None
ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.
3	CVE-2019-19926	476		2019-12-23	2022-04-15	5.0	None	Remote	Low	Not required	None	None	Partial
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
4	CVE-2019-19925	434		2019-12-24	2022-04-15	5.0	None	Remote	Low	Not required	None	None	Partial
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
5	CVE-2019-19924	755		2019-12-24	2022-04-15	5.0	None	Remote	Low	Not required	None	Partial	None
SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.
6	CVE-2019-19923	476		2019-12-24	2022-04-15	5.0	None	Remote	Low	Not required	None	None	Partial
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).
7	CVE-2019-19880	476		2019-12-18	2022-04-15	5.0	None	Remote	Low	Not required	None	None	Partial
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
8	CVE-2019-19603			2019-12-09	2022-04-15	5.0	None	Remote	Low	Not required	None	None	Partial
SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.
9	CVE-2019-19317	681	DoS	2019-12-05	2022-04-15	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
10	CVE-2019-19244			2019-11-25	2022-04-15	5.0	None	Remote	Low	Not required	None	None	Partial
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
11	CVE-2019-19242	476		2019-11-27	2022-04-19	4.3	None	Remote	Medium	Not required	None	None	Partial
SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.

Total number of vulnerabilities : 11 Page : 1 (This Page)