High severity7.5NVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026
CVE-2019-19880
CVE-2019-19880
Description
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
54- SQLite/SQLitedescription
- osv-coords39 versionspkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/sqlite3&distro=SUSE%20Manager%20Proxy%204.0pkg:rpm/suse/sqlite3&distro=SUSE%20Manager%20Server%204.0pkg:rpm/suse/sqlite3&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/sqlite3&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Micro%205.0pkg:rpm/suse/sqlite3&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/sqlite3&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/sqlite3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/sqlite3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/opensuse/sqlite3&distro=openSUSE%20Leap%2015.3pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/re2&distro=SUSE%20Package%20Hub%2012%20SP3pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2012pkg:rpm/suse/re2&distro=SUSE%20Package%20Hub%2012pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2012%20SP3pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweedpkg:rpm/suse/sqlite3&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/sqlite3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/sqlite3&distro=openSUSE%20Leap%2015.2
< 3.36.0-3.12.1+ 38 more
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 80.0.3987.87-bp151.3.59.1
- (no CPE)range: < 20200101-25.1
- (no CPE)range: < 80.0.3987.87-31.1
- (no CPE)range: < 20200101-25.1
- (no CPE)range: < 80.0.3987.87-31.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-3.12.1
- (no CPE)range: < 93.0.4577.82-1.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 3.36.0-9.18.1
- (no CPE)range: < 80.0.3987.87-lp151.2.63.1
- (no CPE)range: < 3.36.0-lp152.4.3.1
- cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
- cpe:2.3:a:suse:package_hub:-:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*Range: <1.0.1.1
Patches
Vulnerability mechanics
References
10- cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfnvdPatchThird Party Advisory
- github.com/sqlite/sqlite/commit/75e95e1fcd52d3ec8282edb75ac8cd0814095d54nvdPatchThird Party Advisory
- www.oracle.com/security-alerts/cpuapr2020.htmlnvdPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-02/msg00010.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-02/msg00025.htmlnvdMailing ListThird Party Advisory
- access.redhat.com/errata/RHSA-2020:0514nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20200114-0001/nvdThird Party Advisory
- www.debian.org/security/2020/dsa-4638nvdThird Party Advisory
- usn.ubuntu.com/4298-1/nvdBroken Link
News mentions
0No linked articles in our index yet.