CVE-2019-19242 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 48%

Vendor	Product	Version
sqlite	sqlite	3.30.1
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	18.04
canonical	ubuntu_linux	19.04
canonical	ubuntu_linux	19.10
redhat	enterprise_linux	8.0
oracle	mysql_workbench	𝑥 ≤ 8.0.19
siemens	sinec_infrastructure_network_services	𝑥 < 1.0.1.1

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

sqlite3

bullseye	3.34.1-3 fixed
buster	not-affected
stretch	not-affected
jessie	not-affected
bullseye (security)	3.34.1-3+deb11u1 fixed
bookworm	3.40.1-2 fixed
sid	3.46.1-1 fixed
trixie	3.46.1-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

sqlite3

eoan	Fixed 3.29.0-2ubuntu0.1 released
disco	Fixed 3.27.2-2ubuntu0.2 released
bionic	not-affected
xenial	not-affected
trusty	not-affected

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

https://github.com/sqlite/sqlite/commit/57f7ece78410a8aae86aa4625fb7556897db384c

https://usn.ubuntu.com/4205-1/

https://www.oracle.com/security-alerts/cpuapr2020.html

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

https://github.com/sqlite/sqlite/commit/57f7ece78410a8aae86aa4625fb7556897db384c

https://usn.ubuntu.com/4205-1/

https://www.oracle.com/security-alerts/cpuapr2020.html