CVE-2019-19244
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
Published Nov 25, 2019 · updated Oct 14, 2026 · sqlite sqlite
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Nov 25, 2019 · NIST NVD
Detected
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
Oct 14, 2026 · NIST NVD
Updated
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
Affected
- cpe canonical/ubuntu linux19.04
- cpe canonical/ubuntu linux19.10
- cpe oracle/mysql workbenchversion unspecified
- cpe siemens/sinec infrastructure network servicesversion unspecified
- cpe sqlite/sqlite3.30.1
Sources
- CVE.orgVulnerability recordCVE-2019-19244
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2019-19244
30-day exploitation probability 3.6%
first.org - NIST NVDVulnerability recordCVE-2019-19244
sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.
nvd.nist.gov