EXPOSURES › CVE-2019-19317

CVE-2019-19317

CRITICAL

DETAIL

SourceNVD · cve Published2019-12-05 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-19317 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

NetApp · vendor Oracle · vendor Siemens · vendor sqlite · vendor cloud backup · product mysql workbench · product ontap select deploy administration utility · product sinec infrastructure network services · product sqlite · product

DESCRIPTION

lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.

AFFECTED FEDRAMP PRODUCTS · 12

PRODUCT	PROVIDER	STATUS	MATCH
Aconex for Defense Oracle	Oracle	Authorized	vendor-exact · 0.90
Cloud Insights NetApp	NetApp	In Process	vendor-exact · 0.90
Federal Managed Cloud Services Oracle	Oracle	Authorized	vendor-exact · 0.90
Fusion Cloud Oracle	Oracle	Authorized	vendor-exact · 0.90
Government Cloud - Common Controls Oracle	Oracle	Authorized	vendor-exact · 0.90
Mendix Cloud for Government Siemens Government Technologies	Siemens Government Technologies	In Process	vendor-exact · 0.90
Oracle Cloud Infrastructure-Government Cloud Oracle	Oracle	Authorized	vendor-exact · 0.90
Oracle Enterprise Performance Management (EPM) Oracle	Oracle	Authorized	vendor-exact · 0.90
Oracle Enterprise Performance Management (EPM) - Moderate Oracle	Oracle	In Process	vendor-exact · 0.90
Oracle Service Cloud Oracle	Oracle	Authorized	vendor-exact · 0.90
Oracle Service Cloud (DOD) Oracle	Oracle	Authorized	vendor-exact · 0.90
Taleo Cloud - U.S. Government Cloud Oracle	Oracle	Authorized	vendor-exact · 0.90