Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-19646

32
FAUCET Score

CVE-2019-19646 describes a critical vulnerability in SQLite versions up to 3.30.1, where the pragma.c component mishandles NOT NULL constraints during an integrity_check PRAGMA command, specifically with generated columns. This flaw, affecting products from NetApp, Oracle, Siemens, SQLite, and Tenable, carries a CVSS score of 9.8, indicating a critical risk with network-based exploitation, low attack complexity, and high impact on confidentiality, integrity, and availability. Despite its high severity and a FAUCET Risk Score of 86/100, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog. Community discussion and media coverage are minimal, suggesting limited public awareness or active threat intelligence.

Impacted Technologies

VendorProductVersion(s)CPE
<= 3.30.1CPE matchmatch criteria
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*
< 1.0.1.1CPE matchmatch criteria
cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*
< 5.19.0CPE matchmatch criteria
cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*
<= 8.0.19CPE matchmatch criteria
cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
5.38%
Probability of exploitation in next 30 days
EPSS Percentile
91.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0538 is in the 86th percentile among its peer group of 36,835 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (29)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 18.2.1-1
microsoftpatch availablevia msrc
Product: azl3 ceph 16.2.10-3 on Azure Linux 3.0Fixed in: 18.2.1-1
microsoftpatch availablevia msrc
Product: azl3 ceph 18.2.1-1 on Azure Linux 3.0Fixed in: 18.2.1-1
microsoftpatch availablevia msrc
Product: 19856-17084Fixed in: 18.2.1-1
microsoftpatch availablevia msrc
Product: 16939-16817Fixed in: 18.2.1-1
microsoftpatch availablevia msrc
Product: 16939-17084Fixed in: 18.2.1-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 18.2.1-1
oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-rhel9-operator:sha256:d244986c3c70c573757e110c4b0206afdefa90de95649cbe415282d73efff9e4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-cli-rhel9:sha256:b4b2fe4c505060bac1710c73e699ed13b0a5fea32e1ba16166f929fb8cceba33
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-cloudnative-pg-rhel9-operator:sha256:b9c8f6ffca5a91d1184ef803bb4db14770cb35d305feb168412fa3a36c440d10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-console-rhel9:sha256:32aeeae377a7ca1463af2a9f64c069d2c02ad1340035d3ea4960518fa3d4db48
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-cosi-sidecar-rhel9:sha256:3a11acadec7fa0b7d7409bf1beb0595a408e6de3d4a4a4cee3897f4876f847b0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-csi-addons-rhel9-operator:sha256:892a0598e91d1cf7ca888ac4a4613a394c2b65233a68d87308744411f797e1ac
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-csi-addons-sidecar-rhel9:sha256:c2d13f3e165b09aa7bb21cdba8fd9f1f30fbc53ca50c212f1528ee3f84675b8a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-multicluster-console-rhel9:sha256:124c052e9e0ce1e51f31f5f5b5e0d5d07a3bfcd28ccaee1d35f7bac03aa26cc0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-multicluster-rhel9-operator:sha256:ddca72908fa5ddf3a22268f23429f6436de10dc6e9d2dbf4c0e01d13aa4bc724
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-must-gather-rhel9:sha256:f9dac6ab62d6ef7786c1a47d64063f18e7af0c96a9144a01f2ca27382dbf773f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odf-rhel9-operator:sha256:ff5b515653e8277b6a71153a990fc33e4a6fc10e226d37220438ebf99e7df98a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/odr-rhel9-operator:sha256:dc5d9c9a06b8c5b0dc347d9b4465e2f26141d4f2be9cf7df36a862e942c3267a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/rook-ceph-rhel9-operator:sha256:3c15da58b7ff718d5dbf00fe344b6fa8d62d023bd18b6f6e708e9613fc95c594
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/cephcsi-rhel9:sha256:a4021d2130cfe6a04c7ff23547239c5114d87ab6db8b630ccff025557a2b686f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/cephcsi-rhel9-operator:sha256:df1eee04994a4cb4e0912dcceeb163cbb5eb991e00279e32f59f5bd10870e027
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/mcg-core-rhel9:sha256:572faf6e2631e5dbb27d305c04b1c290f85282fc42013d4a8922b05065b1d69e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/mcg-rhel9-operator:sha256:c0925c14fef769a74cefbf902659aefecea7aa6241f1281ff2f14712dd356747
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-client-console-rhel9:sha256:c9c249f77da5494a08151d90211799f46c501a136c63bdf5fab8528033c1a078
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-metrics-exporter-rhel9:sha256:3e281be3ee1669685cc79a689b0f78c5372ee2595e845e40909389f92a5e372d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Openshift Data Foundation 4.19Fixed in: odf4/ocs-client-rhel9-operator:sha256:cab6cc6254d2226ea5ad6e7ca0b2ef445912983bda02612788a822cea77d50a9
View patch

Vendor Advisories (3)

microsoft2024-Jun/CVE-2019-19646

CVE-2019-19646

Jun 11, 2024
microsoft2019-Dec/CVE-2019-19646Critical

pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.

Dec 10, 2019
redhatCVE-2019-19646Moderate

sqlite: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns

Dec 9, 2019

References

cert-portal.siemens.com / productcert/pdf/ssa-389290.pdf
PatchThird Party Advisory
github.com / sqlite/sqlite/commit/926f796e8feec15f3836aa0a060ed906f8ae04d3
Third Party Advisory
github.com / sqlite/sqlite/commit/ebd70eedd5d6e6a890a670b5ee874a5eae86b4dd
PatchThird Party Advisory
security.netapp.com / advisory/ntap-20191223-0001
Third Party Advisory
oracle.com / security-alerts/cpuapr2020.html
PatchThird Party Advisory
sqlite.org
Vendor Advisory
tenable.com / security/tns-2021-14
Third Party Advisory