lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
{ "vanir_signatures": [ { "deprecated": false, "digest": { "line_hashes": [ "108797167257271578817300221071881948253", "235700313510420534944766753011415329231", "205240348713251124944163161866951216909", "23159581681161306278337881209633204425", "155267965369537431846818479221722328061", "155282105454847289886663560243272670840", "53219306580069466573881669790282668640", "113218042126459772301992670390555139579" ], "threshold": 0.9 }, "source": "https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8", "signature_type": "Line", "id": "CVE-2019-19317-24159442", "signature_version": "v1", "target": { "file": "src/resolve.c" } }, { "deprecated": false, "digest": { "function_hash": "39593586931161344153093992725377188173", "length": 7487.0 }, "source": "https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8", "signature_type": "Function", "id": "CVE-2019-19317-bf845c0d", "signature_version": "v1", "target": { "file": "src/resolve.c", "function": "lookupName" } } ] }