CVE-2019-19925

HIGH · 7.5 CVSS Gepubliceerd: 24-12-2019 CWE-434

Beschrijving

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

Vendors

Sqlite Siemens Oracle Debian Redhat Suse Opensuse Netapp

Affected products

Sqlite Sinec Infrastructure Network Services Mysql Workbench Debian Linux Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation Package Hub Linux Enterprise Backports Sle Leap Cloud Backup

References

lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
access.redhat.com
cert-portal.siemens.com
github.com
security.netapp.com
usn.ubuntu.com
www.debian.org
www.oracle.com
cert-portal.siemens.com
cert-portal.siemens.com