Description

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

Remediation

References

CVE-2019-16168

Related Vulnerabilities

WordPress Multiple Cross-Site Scripting Vulnerabilities (2.0.11 - 2.3)

Ruby Other Vulnerability (CVE-2014-8090)

WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Cloaking (2.2.9)

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43708)

Nginx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-2266)

Severity

Medium

Classification

CVE-2019-16168 CWE-369 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities