5.5

CVE-2020-13435

Exploit
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sqlite ≫ Sqlite Version <= 3.32.0
Fedoraproject ≫ Fedora Version32
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.64% 0.458
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://usn.ubuntu.com/4394-1/
http://seclists.org/fulldisclosure/2020/Dec/32
http://seclists.org/fulldisclosure/2020/Nov/20
https://support.apple.com/kb/HT211850
https://support.apple.com/kb/HT211931
https://security.gentoo.org/glsa/202007-26
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc
http://seclists.org/fulldisclosure/2020/Nov/19
http://seclists.org/fulldisclosure/2020/Nov/22
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/
https://security.netapp.com/advisory/ntap-20200528-0004/
Third Party Advisory
https://support.apple.com/kb/HT211843
https://support.apple.com/kb/HT211844
https://support.apple.com/kb/HT211935
https://support.apple.com/kb/HT211952
https://www.sqlite.org/src/info/7a5279a25c57adf1
Patch
Vendor Advisory
Exploit