CVE-2020-9327High· 7.5▾ TwilightIn SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.7 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.7%
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.
sqlite = 3.31.1cloud_backupubuntu_linux = 16.04ubuntu_linux = 18.04ubuntu_linux = 19.10sinec_infrastructure_network_services < 1.0.1.1communications_network_charging_and_control >= 12.0.0, <= 12.0.3communications_network_charging_and_control = 6.0.1communications_network_charging_and_control = 12.0.2enterprise_manager_ops_center = 12.4.0.0hyperion_infrastructure_technology = 11.1.2.4mysql_workbench <= 8.0.22outside_in_technology = 8.5.4outside_in_technology = 8.5.5zfs_storage_appliance_kit = 8.8communications_messaging_server = 8.1Upgrade past the affected range:
sinec_infrastructure_network_services 1.0.1.1Connected by shared product, vendor, weakness, or advisory.
CVE-2020-13435Medium· 5.5SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
CVE-2019-19923High· 7.5flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view
CVE-2019-19880High· 7.5exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
CVE-2019-19926High· 7.5multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls
CVE-2019-19242Medium· 5.9SQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in sqlite3ExprCodeTarget in expr.c.
CVE-2020-13632Medium· 5.5ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.