Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.113819
Categoría:Denial of Service
Título:SQLite 3.8.5 - 3.29.0 DoS Vulnerability
Resumen:SQLite is prone to a denial of service (DoS) vulnerability.
Descripción:Summary:
SQLite is prone to a denial of service (DoS) vulnerability.

Vulnerability Insight:
whereLoopAddBtreeIndex in sqlite3.c can crash a browser or
another application because of missing validation of a sqlite_stat1 sz field, which can lead
to a divide-by-zero error.

Vulnerability Impact:
Successful exploitation would allow an attacker to
crash the application and possibly other connected applications as well.

Affected Software/OS:
SQLite version 3.8.5 through 3.29.0.

Solution:
See the references for a solution.

CVSS Score:
4.3

CVSS Vector:
AV:N/AC:M/Au:N/C:N/I:N/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2019-16168
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XZARJHJJDBHI7CE5PZEBXS5HKK6HXKW2/
https://security.gentoo.org/glsa/202003-16
https://www.mail-archive.com/sqlite-users@mailinglists.sqlite.org/msg116312.html
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujan2020.html
https://www.sqlite.org/src/info/e4598ecbdd18bd82945f6029013296690e719a62
https://www.sqlite.org/src/timeline?c=98357d8c1263920b
https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html
SuSE Security Announcement: openSUSE-SU-2019:2298 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00032.html
SuSE Security Announcement: openSUSE-SU-2019:2300 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00033.html
https://usn.ubuntu.com/4205-1/
CopyrightCopyright (C) 2021 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.