Lucene search
Veracode Vulnerability DatabaseVERACODE:28388HistoryDec 06, 2020 - 4:19 a.m.
Use-After-Free
2020-12-0604:19:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
sqlite3
vulnerability
use-after-free
select.c
parse tree rewrite
window functions
EPSS
0.009
Percentile
82.9%
sqlite3 is vulnerable to use-after-free. The vulnerability exists in resetAccumulator in select.c due to the parse tree rewrite for window functions is too late.
References
cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
lists.debian.org/debian-lts-announce/2020/08/msg00037.html
lists.fedoraproject.org/archives/list/[email protected]/message/BN32AGQPMHZRNM6P6L5GZPETOWTGXOKP/
security-tracker.debian.org/tracker/CVE-2020-13871
security.gentoo.org/glsa/202007-26
security.netapp.com/advisory/ntap-20200619-0002/
www.oracle.com/security-alerts/cpuApr2021.html
www.oracle.com/security-alerts/cpujan2021.html
www.sqlite.org/src/info/79eff1d0383179c4
www.sqlite.org/src/info/c8d3b9f0a750a529
www.sqlite.org/src/info/cd708fa84d2aaaea
Related
debiancve
debiancve
CVE-2020-13871
2020-06-06 16:15:10
openvas
openvas
Fedora: Security Advisory for sqlite (FEDORA-2020-d0f892b069)
2020-08-20 00:00:00
Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2021-1626)
2021-03-12 00:00:00
Mageia: Security Advisory (MGASA-2021-0303)
2022-01-28 00:00:00
osv
osv
Malicious SQL statement causes a read-only use-after-free memory error.
2021-11-01 00:00:00
BIT-sqlite-2020-13871
2024-03-06 11:07:31
libsqlite3-0-3.36.0-1.2 on GA media
2024-06-15 00:00:00
prion
prion
Design/Logic Flaw
2020-06-06 16:15:00
sqlite
sqlite
SQLite report about CVE-2020-13871
2020-01-01 00:00:00
redhatcve
redhatcve
CVE-2020-13871
2020-06-09 14:55:56
nvd
nvd
CVE-2020-13871
2020-06-06 16:15:10
cvelist
cvelist
CVE-2020-13871
2020-06-06 15:37:37
archlinux
archlinux
[ASA-202006-11] sqlite: arbitrary code execution
2020-06-28 00:00:00
ubuntucve
ubuntucve
CVE-2020-13871
2020-06-06 00:00:00
ibm
ibm
fedora
fedora
[SECURITY] Fedora 32 Update: sqlite-3.33.0-1.fc32
2020-08-20 01:13:16
cve
cve
CVE-2020-13871
2020-06-06 16:15:10
nessus
nessus
Fedora 32 : sqlite (2020-d0f892b069)
2020-08-20 00:00:00
Oracle MySQL Workbench < 8.0.23 Multiple Vulnerabilities (Jan 2021)
2021-06-09 00:00:00
EulerOS Virtualization 2.9.1 : sqlite (EulerOS-SA-2021-1626)
2021-03-10 00:00:00
chrome
chrome
Chrome for Android Update
2020-10-13 00:00:00
mageia
mageia
Updated sqlite3 packages fix security vulnerabilities
2021-07-01 02:58:41
gentoo
gentoo
SQLite: Multiple vulnerabilities
2020-07-27 00:00:00
debian
debian
[SECURITY] [DLA 2340-1] sqlite3 security update
2020-08-22 22:34:41
ics
ics
Siemens SINEC INS
2022-03-10 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00