CVE-2019-19244

Name of the Vulnerable Software and Affected Versions SQLite version 3.30.1

Description The issue is related to an error in the sqlite3Select function of the SQLite database management system, which occurs when the DISTINCT operator is used. This can be exploited by a remote attacker to cause a denial of service. Specifically, the problem arises when a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage.

Recommendations For SQLite version 3.30.1, consider applying a patch or fix that addresses the issue in the sqlite3Select function to prevent potential denial of service attacks. As a temporary workaround, avoid using the DISTINCT operator in sub-selects that also utilize window functions and specific ORDER BY clauses until a patch is available.