CVE Catalog
CVE-2019-19645
MediumSummary
A vulnerability in SQLite up to version 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
Risk Assessment
The risk involves a potential Denial of Service (DoS) attack by overloading the database system, which may lead to unavailability of applications using SQLite.
Recommendation
It is recommended to immediately upgrade SQLite to version 3.30.2 or later, which includes a fix to eliminate infinite recursion.
Original NVD description (English source)
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.