ZeroDay Findings
Sign inSign up

Findings

CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view.

Published Dec 24, 2019 · updated Oct 14, 2026 · sqlite sqlite

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 24, 2019 · NIST NVD

    Detected

    flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

  2. Oct 14, 2026 · NIST NVD

    Updated

    flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

Affected

  • cpe debian/debian linux10.0
  • cpe debian/debian linux9.0
  • cpe netapp/cloud backupversion unspecified
  • cpe opensuse/backports sle15.0
  • cpe oracle/mysql workbenchversion unspecified
  • cpe redhat/enterprise linux desktop6.0
  • cpe redhat/enterprise linux server6.0
  • cpe redhat/enterprise linux workstation6.0
  • cpe siemens/sinec infrastructure network servicesversion unspecified
  • cpe sqlite/sqlite3.30.1
  • cpe suse/package hubversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2019-19923

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2019-19923

    30-day exploitation probability 6.8%

    first.org
  • NIST NVDVulnerability recordCVE-2019-19923

    flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).

    nvd.nist.gov

References