CVE-2019-19645CWE-674

CVE-2019-19645

Medium · published December 9, 2019

CVSS v3.1
5.5
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00566 · 46.2th percentile
Weakness
CWE-674 · Uncontrolled Recursion
Published
2019-12-09T21:15Z
Affected products (6)
ProductVersionsFixed in
sqlite/sqlite≤ 3.30.1—
netapp/cloud_backupall versions—
netapp/ontap_select_deploy_administration_utilityall versions—
oracle/mysql_workbench≤ 8.0.19—
tenable/tenable.sc< 5.19.05.19.0
siemens/sinec_infrastructure_network_services< 1.0.1.11.0.1.1
References (14)
EPSS history
Timeline
  • 09 DEC 15:15Z
    alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE…
    cvelistv5