High · published December 23, 2019
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
| Product | Versions | Fixed in |
|---|---|---|
| sqlite/sqlite | all versions | — |
| siemens/sinec_infrastructure_network_services | < 1.0.1.1 | 1.0.1.1 |
| oracle/mysql_workbench | ≤ 8.0.19 | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| redhat/enterprise_linux_desktop | all versions | — |
| redhat/enterprise_linux_server | all versions | — |
| redhat/enterprise_linux_workstation | all versions | — |
| opensuse/backports_sle | all versions | — |
| opensuse/leap | all versions | — |
| suse/package_hub | all versions | — |
| netapp/cloud_backup | all versions | — |