CVE-2020-13871 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2020-13871

Modified

More Info Official Page

Source-cve@mitre.org

Published At-06 Jun, 2020 | 16:15

Updated At-07 Nov, 2023 | 03:16

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

sqlite>>sqlite>>3.32.2

cpe:2.3:a:sqlite:sqlite:3.32.2:*:*:*:*:*:*:*

>>fedora>>33

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>9.0

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Oracle Corporation

>>communications_messaging_server>>8.1

cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*

Oracle Corporation

>>communications_network_charging_and_control>>6.0.1

cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*

Oracle Corporation

>>communications_network_charging_and_control>>12.0.2

cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.2:*:*:*:*:*:*:*

Oracle Corporation

>>enterprise_manager_ops_center>>12.4.0.0

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>hyperion_infrastructure_technology>>11.1.2.4

cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*

Oracle Corporation

>>mysql_workbench>>Versions up to 8.0.22(inclusive)

cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*

Oracle Corporation

>>zfs_storage_appliance_kit>>8.8

cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

>>sinec_infrastructure_network_services>>Versions before 1.0.1.1(exclusive)

cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

>>cloud_backup>>-

cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

>>ontap_select_deploy_administration_utility>>-

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-416	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf	cve@mitre.org	Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html	cve@mitre.org	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BN32AGQPMHZRNM6P6L5GZPETOWTGXOKP/	cve@mitre.org	N/A
https://security.gentoo.org/glsa/202007-26	cve@mitre.org	Mitigation Third Party Advisory
https://security.netapp.com/advisory/ntap-20200619-0002/	cve@mitre.org	Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html	cve@mitre.org	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html	cve@mitre.org	Third Party Advisory
https://www.sqlite.org/src/info/79eff1d0383179c4	cve@mitre.org	Patch Vendor Advisory
https://www.sqlite.org/src/info/c8d3b9f0a750a529	cve@mitre.org	Exploit Vendor Advisory
https://www.sqlite.org/src/info/cd708fa84d2aaaea	cve@mitre.org	Exploit Vendor Advisory