Wind River Support Network

HomeDefectsLIN7-11402

Fixed

LIN7-11402 : Security Advisory - sqlite - CVE-2019-16168

Created: Sep 10, 2019 Updated: Nov 14, 2019

Resolved Date: Nov 14, 2019

Found In Version: 7.0.0.1

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

Description

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

CREATE(Triage):(User=admin) [CVE-2019-16168|https://nvd.nist.gov/vuln/detail/CVE-2019-16168]