CVE:CVE-2019-19880
CNNVD:CNNVD-201912-844
SQLite是美国D.Richard Hipp软件开发者的一套基于C语言的开源嵌入式关系数据库管理系统。该系统具有独立性、隔离性、跨平台等特点。
SQLite 3.30.1版本中的window.c文件的exprListAppendList存在代码问题漏洞，该漏洞源于window定义的ORDER BY子句中的常量整数值处理不当。远程攻击者可通过发送特制请求利用该漏洞导致应用程序崩溃。
solution:Upgrade sqlite sqlite to a higher version than 3.30.1,and avoid the version 3.30.1; Upgrade netapp cloud_backup to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade suse package_hub to a higher version than -; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade oracle mysql_workbench to a higher version than 8.0.19,and avoid the version (,8.0.19]; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1)