CVE-2019-19244

CVE Details

CVE-2019-19244

Last Update

11/7/24

NIST CVE Summary

Sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.

Our Official Summary

Waiting on a fix from third party mongodb vendor.

CVE Severity

8.1

Status

Ongoing

Affected Products & Versions

• Palette VerteX airgap 4.4.14
• Palette VerteX 4.5.3, 4.5.8
• Palette Enterprise 4.5.3, 4.5.8

Revision History

• 1.0 08/16/2024 Initial Publication
• 2.0 08/17/2024 Added palette VerteX 4.4.14 to Affected Products
• 3.0 09/25/2024 CVE remediated in Palette VerteX 4.4.18
• 4.0 10/14/2024 Added Palette VerteX & Palette Enterptise 4.5.3 to Affected Products
• 5.0 11/7/2024 Added Palette VerteX & Palette Enterptise 4.5.8 to Affected Products