Description

ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.

Remediation

References

CVE-2019-19959

Related Vulnerabilities

Oracle Database Server Cryptographic Issues Vulnerability (CVE-2006-0270)

Oracle Database Server CVE-2007-5512 Vulnerability (CVE-2007-5512)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-8147)

MySQL CVE-2020-14868 Vulnerability (CVE-2020-14868)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4421)

Severity

High

Classification

CVE-2019-19959 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities