VDB

ALPINE-CVE-2019-19244

ALPINE-CVE-2019-19244 PUBLISHED CVSS 7.5 HIGH

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.18sqlite3.10.2-r2, 3.11.0-r2, 3.12.0-r2
Alpine:v3.15sqlite0, 0, 3.10.2-r2
Alpine:v3.13sqlite0, 0, 3.9.2-r2
Alpine:v3.21sqlite0, 0, 3.9.2-r2
Alpine:v3.8sqlite3.11.0-r2, 0, 0
Alpine:v3.22sqlite3.11.0-r2, 3.11.1-r2, 3.12.0-r2
Alpine:v3.11sqlite0, 3.12.2-r2, 3.11.0-r2
Alpine:v3.19sqlite3.11.1-r2, 3.11.0-r2, 3.10.2-r2
Alpine:v3.10sqlite3.7.5-r2, 0, 0
Alpine:v3.20sqlite3.8.0.2-r2, 3.9.2-r2, 3.8.7.1-r2
Alpine:v3.9sqlite3.11.1-r2, 3.8.7.1-r2, 0
Alpine:v3.23sqlite3.8.6-r2, 3.8.4.3-r2, 3.8.4-r2
Alpine:v3.24sqlite0, 0
Alpine:v3.14sqlite3.8.1-r2, 3.8.1-r2, 3.8.0.2-r2
Alpine:v3.17sqlite0, 3.9.2-r2, 3.9.1-r2
Alpine:v3.12sqlite3.8.7.4-r2, 0, 0
Alpine:v3.16sqlite3.26.0-r2, 0, 0

Timeline

  • Nov 25, 2019 CVE Published
  • Apr 30, 2026 Distribution Patch
  • Jun 9, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›