multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 23, 2019 |
| Centos_linux | — | Upgrade chromium-browserUpgrade chromium-browser-debuginfo | Feb 18, 2020 | Dec 23, 2019 |
| Debian | — | Upgrade chromium | Mar 12, 2020 | Dec 23, 2019 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Aug 7, 2020 | Feb 4, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sqliteUpgrade sqlite-devel | Nov 3, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sqlite-develUpgrade sqlite | Sep 28, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sqlite-develUpgrade sqlite | Feb 24, 2020 | Dec 23, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sqlite-docUpgrade sqliteUpgrade sqlite-libsUpgrade sqlite-devel | Feb 26, 2020 | Dec 23, 2019 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Nov 17, 2021 | Dec 23, 2019 |
| Oracle Solaris | — | Upgrade database/sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade database/sqlite-3/documentation to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4Upgrade runtime/tcl-8/tcl-sqlite-3 to version 3.31.1-11.4.21.0.1.69.0 on Solaris 11.4 | Jan 19, 2021 | Dec 23, 2019 |
| Redhat_linux | — | Upgrade chromium-browserUpgrade chromium-browser-debuginfo | Feb 18, 2020 | Dec 23, 2019 |
| Suse | — | Upgrade libre2-0Upgrade sqlite3-develUpgrade chromiumUpgrade libsqlite3-0Upgrade chromedriverUpgrade sqlite3-docUpgrade re2-develUpgrade sqlite3Upgrade libsqlite3-0-32bit | Feb 12, 2020 | Dec 23, 2019 |
| Ubuntu | — | Upgrade libsqlite3-0Upgrade libsqlite3-0 (Ubuntu Pro)Upgrade sqlite3Upgrade sqlite3 (Ubuntu Pro) | Mar 11, 2020 | Dec 23, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 23, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub