CVE-2019-19603

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2019-19603

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-19603.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2019-19603

Downstream

BELL-CVE-2019-19603

DEBIAN-CVE-2019-19603

RHSA-2021:4396

RLSA-2021:4396

SUSE-SU-2021:2320-1

SUSE-SU-2021:3215-1

UBUNTU-CVE-2019-19603

USN-4394-1

openSUSE-SU-2021:1058-1

openSUSE-SU-2021:2320-1

Related

Published

2019-12-09T19:15:14.710Z

Modified

2026-03-15T22:31:37.585774Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application crash.

References

Affected packages

Git / github.com/apache/guacamole-server

Affected ranges

Type

GIT

Repo

https://github.com/apache/guacamole-server

Events

Introduced

Last affected

90e15cb70635e8d13ebdefec9262701d2179983a

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.0-NA"
        }
    ]
}

Type

GIT

Repo

https://github.com/sqlite/sqlite

Events

Introduced

Last affected

25e9591209453dc0904f8f0f1c4d5090c836e19b

Fixed

527cbd4a104cb93bf3994b3dd3619a6299a78b13

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.30.1"
        }
    ]
}

Affected versions

0.*

0.3.0

0.4.0

0.5.0

0.6.0

0.6.1

0.6.2

0.6.3

0.7.0

0.7.1

0.7.2

0.7.3

0.7.4

0.8.0

0.8.2

0.8.3

0.9.0

0.9.1

0.9.10-incubating

0.9.10-incubating-RC1

0.9.10-incubating-RC2

0.9.10-incubating-RC3

0.9.11-incubating

0.9.11-incubating-RC1

0.9.12-incubating

0.9.12-incubating-RC1

0.9.13-incubating

0.9.13-incubating-RC1

0.9.14

0.9.14-RC1

0.9.2

0.9.3

0.9.4

0.9.5

0.9.6

0.9.7

0.9.8

0.9.9

1.*

1.0.0

1.0.0-RC1

1.1.0

1.1.0-RC1

1.2.0

1.2.0-RC1

1.3.0

1.3.0-RC1

Other

cvs-to-fossil-cutover

experimental

fts3-refactor

version-1.*

version-1.0

version-1.0.1

version-1.0.10

version-1.0.12

version-1.0.13

version-1.0.14

version-1.0.15

version-1.0.16

version-1.0.17

version-1.0.18

version-1.0.19

version-1.0.20

version-1.0.21

version-1.0.22

version-1.0.23

version-1.0.24

version-1.0.25

version-1.0.26

version-1.0.27

version-1.0.28

version-1.0.29

version-1.0.3

version-1.0.30

version-1.0.31

version-1.0.32

version-1.0.4

version-1.0.5

version-1.0.8

version-1.0.9

version-2.*

version-2.0.0

version-2.0.1

version-2.0.2

version-2.0.3

version-2.0.4

version-2.0.5

version-2.0.6

version-2.0.7

version-2.0.8

version-2.1.0

version-2.1.1

version-2.1.2

version-2.1.3

version-2.1.4

version-2.1.5

version-2.1.6

version-2.1.7

version-2.2.0

version-2.2.1

version-2.2.2

version-2.2.3

version-2.2.4

version-2.2.5

version-2.3.0

version-2.3.1

version-2.3.2

version-2.3.3

version-2.4.0

version-2.4.1

version-2.4.10

version-2.4.11

version-2.4.12

version-2.4.2

version-2.4.3

version-2.4.4

version-2.4.5

version-2.4.6

version-2.4.7

version-2.4.8

version-2.4.9

version-2.5.0

version-2.5.1

version-2.5.2

version-2.5.3

version-2.5.4

version-2.5.5

version-2.5.6

version-2.6.0

version-2.6.1

version-2.6.2

version-2.6.3

version-2.7.0

version-2.7.1

version-2.7.2

version-2.7.3

version-2.7.4

version-2.7.5

version-2.7.6

version-2.8.0

version-2.8.1

version-2.8.10

version-2.8.11

version-2.8.12

version-2.8.13

version-2.8.2

version-2.8.3

version-2.8.4

version-2.8.5

version-2.8.6

version-2.8.7

version-2.8.8

version-2.8.9

version-3.*

version-3.0.0

version-3.0.1

version-3.0.2

version-3.0.3

version-3.0.4

version-3.0.5

version-3.0.6

version-3.0.7

version-3.0.8

version-3.1.0

version-3.1.1

version-3.1.2

version-3.1.3

version-3.1.3.1

version-3.1.4

version-3.1.5

version-3.1.6

version-3.10.0

version-3.11.0

version-3.11.1

version-3.12.0

version-3.13.0

version-3.14.0

version-3.15.0

version-3.16.0

version-3.19.0

version-3.19.1

version-3.19.2

version-3.2.0

version-3.2.1

version-3.2.2

version-3.2.3

version-3.2.4

version-3.2.5

version-3.2.6

version-3.2.7

version-3.21.0

version-3.22.0

version-3.23.0

version-3.23.1

version-3.24.0

version-3.25.0

version-3.26.0

version-3.27.0

version-3.28.0

version-3.29.0

version-3.3.0

version-3.3.1

version-3.3.10

version-3.3.11

version-3.3.12

version-3.3.13

version-3.3.14

version-3.3.15

version-3.3.16

version-3.3.17

version-3.3.2

version-3.3.3

version-3.3.4

version-3.3.5

version-3.3.6

version-3.3.7

version-3.3.8

version-3.3.9

version-3.30.0

version-3.30.1

version-3.4.0

version-3.4.1

version-3.4.2

version-3.5.0

version-3.5.1

version-3.5.2

version-3.5.3

version-3.5.4

version-3.5.5

version-3.5.6

version-3.5.7

version-3.5.8

version-3.5.9

version-3.6.0

version-3.6.1

version-3.6.10

version-3.6.11

version-3.6.12

version-3.6.13

version-3.6.14

version-3.6.15

version-3.6.16

version-3.6.17

version-3.6.18

version-3.6.19

version-3.6.2

version-3.6.20

version-3.6.21

version-3.6.22

version-3.6.23

version-3.6.3

version-3.6.4

version-3.6.5

version-3.6.6

version-3.6.7

version-3.6.8

version-3.6.9

version-3.7.0

version-3.7.1

version-3.7.10

version-3.7.11

version-3.7.12

version-3.7.12.1

version-3.7.13

version-3.7.14

version-3.7.15

version-3.7.16

version-3.7.16.1

version-3.7.16.2

version-3.7.17

version-3.7.2

version-3.7.3

version-3.7.4

version-3.7.5

version-3.7.6

version-3.7.6.1

version-3.7.7

version-3.7.8

version-3.7.9

version-3.8.0

version-3.8.1

version-3.8.10

version-3.8.10.1

version-3.8.11

version-3.8.11.1

version-3.8.2

version-3.8.3

version-3.8.4

version-3.8.4.1

version-3.8.5

version-3.8.6

version-3.8.7

version-3.8.7.1

version-3.8.8

version-3.8.9

version-3.9.0

version-3.9.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-19603.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "8.0.19"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "1.0.1.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.0.1.1"
            }
        ]
    }
]

vanir_signatures

[
    {
        "signature_version": "v1",
        "target": {
            "file": "src/build.c",
            "function": "isShadowTableName"
        },
        "source": "https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13",
        "deprecated": false,
        "digest": {
            "function_hash": "27626154420001372684197020500987905409",
            "length": 549.0
        },
        "id": "CVE-2019-19603-633dc601",
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "src/build.c"
        },
        "source": "https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "287497896093492558717730566123349902056",
                "68078755522353012415862849008772074774",
                "316924857588978521402910852767717284739",
                "212195236596553332127943276576640944305",
                "324300520921048957635732506972104711961",
                "213332378117089353650062357664045575282",
                "321667461324656957039245808403360856124",
                "109516565254940296714267784274429599928",
                "27886267803694925718781595726542831865",
                "165614000285222875012276120822245002216",
                "56174613741038714779478406230933867861",
                "41373471911683750527177290269900368353",
                "267216875257722564659356711824602778917",
                "235964536311061423080369552431376023255",
                "105147226921722913353088457384384708218",
                "319610622448253636705003985192738509312",
                "17814199897514829110021692228409468776",
                "334119984944526948920047498120317882642",
                "234766659524793751203695262721972211193",
                "333990243645065370866821343180715188660",
                "87674112754695016531360790925103079314",
                "204566464292281694901325396982788126225",
                "206543982201493453106971491728625454660"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2019-19603-8d7bac71",
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "src/sqliteInt.h"
        },
        "source": "https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "3798063273630910954523208719825368993",
                "161909305375505847269551325692640971615",
                "163435075880835856004996898328017172720",
                "232546748214512066955239099740306370909"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2019-19603-a0080460",
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "src/build.c",
            "function": "sqlite3CheckObjectName"
        },
        "source": "https://github.com/sqlite/sqlite/commit/527cbd4a104cb93bf3994b3dd3619a6299a78b13",
        "deprecated": false,
        "digest": {
            "function_hash": "215797318871461761090532825553442516234",
            "length": 694.0
        },
        "id": "CVE-2019-19603-c886c206",
        "signature_type": "Function"
    }
]