CVE-2019-19925

Name of the Vulnerable Software and Affected Versions SQLite version 3.30.1

Description The issue is related to the zipfileUpdate() function in SQLite, which mishandles a NULL pathname during an update of a ZIP archive. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For SQLite version 3.30.1, consider disabling the zipfileUpdate() function until a patch is available to prevent potential exploitation. Restrict access to the zipfile.c module to minimize the risk of denial of service attacks. Avoid using the zipfileUpdate() function with NULL pathnames until the issue is resolved.