{"id":"CVE-2019-19645","title":"alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.","summary":"alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-674"],"vendor":"sqlite","product":"sqlite","affected":["sqlite <= 3.30.1","cloud_backup","ontap_select_deploy_administration_utility","mysql_workbench <= 8.0.19","tenable.sc < 5.19.0","sinec_infrastructure_network_services < 1.0.1.1"],"patched":["tenable.sc 5.19.0","sinec_infrastructure_network_services 1.0.1.1"],"published":"2019-12-09","updated":"2026-10-14","sourceUpdated":"2026-10-14T08:16:58.600","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-19645","references":[{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","label":"cve@mitre.org"},{"url":"https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06","label":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20191223-0001/","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4394-1/","label":"cve@mitre.org"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","label":"cve@mitre.org"},{"url":"https://www.tenable.com/security/tns-2021-14","label":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20191223-0001/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4394-1/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.tenable.com/security/tns-2021-14","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-389290.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00566,"epssPercentile":0.46797,"ingestedAt":"2026-10-14T08:23:04.324Z","slug":"CVE-2019-19645","body":"## Overview\n\nalter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.\n\n## Affected\n\n- `sqlite <= 3.30.1`\n- `cloud_backup`\n- `ontap_select_deploy_administration_utility`\n- `mysql_workbench <= 8.0.19`\n- `tenable.sc < 5.19.0`\n- `sinec_infrastructure_network_services < 1.0.1.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `tenable.sc 5.19.0`\n- `sinec_infrastructure_network_services 1.0.1.1`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}