{"affected":[{"product":"n/a","source":"CNA: mitre","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]}],"cveId":"CVE-2019-9936","cwes":[],"description":"In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c.","epss":{"date":"2026-11-02","percentile":0.92637,"score":0.0535},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793641894338,"publishedAt":1553238424000,"references":[{"source":"CNA: mitre","tags":["x_refsource_MISC"],"url":"https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg114382.html"},{"source":"CNA: mitre","tags":["x_refsource_MISC"],"url":"https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg114394.html"},{"source":"CNA: mitre","tags":["x_refsource_MISC"],"url":"https://sqlite.org/src/info/b3fa58dd7403dbd4"},{"source":"CNA: mitre","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/107562"},{"source":"CNA: mitre","tags":["x_refsource_CONFIRM"],"url":"https://security.netapp.com/advisory/ntap-20190416-0005/"},{"source":"CNA: mitre","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00026.html"},{"source":"CNA: mitre","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXD2GYJVTDGEQPUNMMMC5TB7MQXOBBMO/"},{"source":"CNA: mitre","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N66U5PY5UJU4XBFZJH7QNKIDNAVIB4OP/"},{"source":"CNA: mitre","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/4019-1/"},{"source":"CNA: mitre","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"https://security.gentoo.org/glsa/201908-09"},{"source":"CNA: mitre","tags":["x_refsource_MISC"],"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"},{"source":"CNA: mitre","tags":["x_refsource_MISC"],"url":"https://www.oracle.com/security-alerts/cpujan2020.html"},{"source":"CNA: mitre","tags":["mailing-list","x_refsource_MLIST"],"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg114382.html"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://www.mail-archive.com/sqlite-users%40mailinglists.sqlite.org/msg114394.html"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://sqlite.org/src/info/b3fa58dd7403dbd4"},{"source":"ADP: CVE","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/107562"},{"source":"ADP: CVE","tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://security.netapp.com/advisory/ntap-20190416-0005/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00026.html"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EXD2GYJVTDGEQPUNMMMC5TB7MQXOBBMO/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N66U5PY5UJU4XBFZJH7QNKIDNAVIB4OP/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/4019-1/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"https://security.gentoo.org/glsa/201908-09"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"},{"source":"ADP: CVE","tags":["x_refsource_MISC","x_transferred"],"url":"https://www.oracle.com/security-alerts/cpujan2020.html"},{"source":"ADP: CVE","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"remediation":[],"revision":"4aa8ffaf6779decf53f3b1cb1335a3cd989336b6ac5590d584384cb4f030e658","sources":[{"modifiedAt":1793641894338,"name":"CNA: mitre","retrievedAt":1793642914038,"url":"https://www.cve.org/CVERecord?id=CVE-2019-9936"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793642933041,"url":"https://api.first.org/data/v1/epss?cve=CVE-2019-9936"}],"ssvc":{"assessedAt":1793641879830,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2019-9936","updatedAt":1793642933041}