CVE-2019-16168

sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c

Published Sep 9, 2019 CVSS 3.1 · 6.5 Medium EPSS 4.2% KEV · Not listed
Description
In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-2340-1 sqlite3 security update
EUVD EUVD EUVD-2019-6988 In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."
Ubuntu USN Ubuntu USN USN-4205-1 SQLite vulnerabilities
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}