Medium · published September 9, 2019
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
| Product | Versions | Fixed in |
|---|---|---|
| sqlite/sqlite | ≥ 3.8.5, ≤ 3.29.0 | — |
| netapp/active_iq_unified_manager | ≥ 7.3 | — |
| netapp/active_iq_unified_manager | ≥ 9.5 | — |
| netapp/e-series_santricity_os_controller | ≥ 11.0.0, ≤ 11.60.3 | — |
| netapp/oncommand_insight | all versions | — |
| netapp/oncommand_workflow_automation | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| netapp/santricity_unified_manager | all versions | — |
| netapp/steelstore_cloud_integrated_storage | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| fedoraproject/fedora | all versions | — |
| debian/debian_linux | all versions | — |
| tenable/nessus_agent | ≤ 8.2.3 | — |
| oracle/communications_design_studio | all versions | — |
| oracle/communications_design_studio | all versions | — |
| oracle/communications_design_studio | all versions | — |
| oracle/jdk | all versions | — |
| oracle/jre | all versions | — |
| oracle/mysql | ≥ 8.0.0, ≤ 8.0.18 | — |
| oracle/outside_in_technology | all versions | — |
| oracle/solaris | all versions | — |
| oracle/zfs_storage_appliance | all versions | — |
| mcafee/policy_auditor | < 6.5.1 | 6.5.1 |