CVE-2019-9937: Null Pointer Dereference
In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5hash.c and ext/fts5/fts5index.c.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this SQLite vulnerability?
The vulnerability ID is CVE-2019-9937.
What is the severity of CVE-2019-9937?
The severity of CVE-2019-9937 is high with a CVSS score of 7.5.
Which version of SQLite is affected by CVE-2019-9937?
SQLite version 3.27.2 is affected by CVE-2019-9937.
What is the impact of CVE-2019-9937?
CVE-2019-9937 can lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c, potentially causing a crash or denial of service.
Are there any references related to CVE-2019-9937?
Yes, you can find more information about CVE-2019-9937 at the following references: [http://www.securityfocus.com/bid/107562](http://www.securityfocus.com/bid/107562), [https://security.netapp.com/advisory/ntap-20190416-0005/](https://security.netapp.com/advisory/ntap-20190416-0005/), [https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXD2GYJVTDGEQPUNMMMC5TB7MQXOBBMO/](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EXD2GYJVTDGEQPUNMMMC5TB7MQXOBBMO/)