SQLite 3.30.1 Vulnerability in SELECT DISTINCT with LEFT JOIN
CVE-2019-19923

7.5HIGH

Key Information:

Vendor: Sqlite
Status: Sqlite
Vendor: CVE Published:; 24 December 2019

What is CVE-2019-19923?

SQLite version 3.30.1 contains a vulnerability in the flattenSubquery function within the select.c file. This issue arises when SELECT DISTINCT statements involving LEFT JOIN operations are executed, particularly when the right-hand side of the join is a view. As a result, this can lead to a NULL pointer dereference or potentially incorrect query results, which may impact the integrity of data retrieval processes.