Bug 711194

Summary:	<dev-db/sqlite-3.30: Crash (DoS) due to validation error (CVE-2019-16168)
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	arfrever.fta, floppym, proxy-maint
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	A3 [cleanup]
Package list:		Runtime testing required:	---

Description Sam James archtester

2020-03-01 17:52:32 UTC

Description:
"In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the query planner."

Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev

2020-03-02 22:34:43 UTC


*** This bug has been marked as a duplicate of bug 697678 ***