PT-2020-6897 · Sqlite+11 · Sqlite+12

Published 2020-05-23 · Updated 2024-06-15 · CVE-2020-13435

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.32.0

Description The issue is related to a null pointer dereference in the sqlite3ExprCodeTarget function of the SQLite database management system. This can be exploited to cause a denial of service. A remote attacker may be able to trigger this issue, leading to a service disruption.

Recommendations For versions prior to 3.32.0, update to a version that includes improved checks to address this issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

Exploit

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2021:4396

ALT-PU-2020-2017

ALT-PU-2020-2898

AZL-38965

AZL-40765

BDU:2023-05112

BIT-SQLITE-2020-13435

CESA-2021_4396

CVE-2020-13435

MGASA-2021-0303

OPENSUSE-SU-2021:1058-1

OPENSUSE-SU-2021:2320-1

OPENSUSE-SU-2021_1058-1

OPENSUSE-SU-2021_2320-1

OPENSUSE-SU-2024:11400-1

RHSA-2021:4396

RHSA-2021_4396

RLSA-2021:4396

SUSE-SU-2021:2320-1

SUSE-SU-2021:3215-1

USN-4394-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Freebsd

Linuxmint

Apple Macos

Red Hat

Rocky Linux

Sqlite

Suse

Ubuntu

Itunes

References · 137

• 🔥 https://sqlite.org/src/info/7a5279a25c57adf1 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2021:3215-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-11655 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-13435 · Security Note
• https://security.gentoo.org/glsa/202007-26 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-8740 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:2320-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11400-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05112 · Security Note
• https://ubuntu.com/security/notices/USN-4394-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-13632 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-19603 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4394-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4438-1 · Vendor Advisory