Lucene search
IBMC672C39FBBDF2FB7F29F14B836418C34934E05354948A44F41CFDABC3D4150F5HistoryAug 12, 2020 - 3:46 a.m.
Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2020-9327)
2020-08-1203:46:02
www.ibm.com
6
0.01 Low
EPSS
Percentile
84.0%
Summary
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
Vulnerability Details
CVEID:CVE-2020-9327
**DESCRIPTION:**SQLite is vulnerable to a denial of service, caused by a NULL pointer dereference in isAuxiliaryVtabOperator. By generating column optimization, a remote attacker could exploit this vulnerability to cause a segmentation fault.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/176691 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Tivoli Composite Application Manager for Transactions (Response Time) | 7.4.0.2 |
| IBM Tivoli Composite Application Manager for Transactions (Response Time) | 7.4.0.1 |
| IBM Cloud Application Performance Management - Response Time Monitoring Agent | 8.1.4 |
Remediation/Fixes
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| tivoli monitoring | eq | 7.4.0.1 | |
| tivoli monitoring | eq | 7.4.0.2 | |
| tivoli monitoring | eq | 8.1.4 |
Related
sqlite
sqlite
SQLite report about CVE-2020-9327
2020-01-01 00:00:00
veracode
veracode
Denial Of Service(DoS)
2020-11-05 03:10:13
nvd
nvd
CVE-2020-9327
2020-02-21 22:15:10
cvelist
cvelist
CVE-2020-9327
2020-02-21 21:25:14
nessus
nessus
Photon OS 2.0: Sqlite PHSA-2020-2.0-0234
2020-04-29 00:00:00
Photon OS 3.0: Sqlite PHSA-2020-3.0-0083
2020-04-29 00:00:00
EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1300)
2020-03-23 00:00:00
osv
osv
BIT-sqlite-2020-9327
2024-03-06 11:06:54
debiancve
debiancve
CVE-2020-9327
2020-02-21 22:15:10
ubuntucve
ubuntucve
CVE-2020-9327
2020-02-21 00:00:00
ibm
ibm
prion
prion
Null pointer dereference
2020-02-21 22:15:00
photon
photon
cve
cve
CVE-2020-9327
2020-02-21 22:15:10
redhatcve
redhatcve
CVE-2020-9327
2020-03-02 20:40:51
openvas
openvas
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-1300)
2020-03-23 00:00:00
Mageia: Security Advisory (MGASA-2021-0303)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2020-1364)
2020-04-01 00:00:00
gentoo
gentoo
SQLite: Multiple vulnerabilities
2020-03-15 00:00:00
almalinux
almalinux
Moderate: sqlite security update
2020-11-03 12:04:56
redhat
redhat
(RHSA-2020:4442) Moderate: sqlite security update
2020-11-03 12:04:56
(RHSA-2021:0146) Moderate: Release of OpenShift Serverless 1.12.0
2021-01-14 13:24:22
oraclelinux
oraclelinux
sqlite security update
2020-11-10 00:00:00
mageia
mageia
Updated sqlite3 packages fix security vulnerabilities
2021-07-01 02:58:41
cloudfoundry
cloudfoundry
USN-4298-1: SQLite vulnerabilities | Cloud Foundry
2020-03-31 00:00:00
ubuntu
ubuntu
SQLite vulnerabilities
2020-03-10 00:00:00
suse
suse
Security update for sqlite3 (important)
2021-07-14 00:00:00
Security update for sqlite3 (important)
2021-07-20 00:00:00
ics
ics
Siemens SINEC INS
2022-03-10 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
0.01 Low
EPSS
Percentile
84.0%
Related for C672C39FBBDF2FB7F29F14B836418C34934E05354948A44F41CFDABC3D4150F5