Versio.io

CVE-2020-13630

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 27-05-2020 05:15
Last modified: - 13-05-2022 10:56
Total changes: - 5

Description

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
High
Attack complexity
Local
Attack vector
High
Availability
High
Confidentiality
High
Integrity
Low
Privileges required
Unchanged
Scope
None
User interaction
7.0
Base score
1.0
5.9
Exploitability score
Impact score
 

Verification logic

OR
OR
vendor=sqlite AND product=sqlite AND versionEndExcluding=3.32.0
OR
vendor=fedoraproject AND product=fedora AND version=32
OR
vendor=canonical AND product=ubuntu_linux AND version=18.04 AND software_edition=lts
vendor=canonical AND product=ubuntu_linux AND version=19.10
vendor=canonical AND product=ubuntu_linux AND version=20.04 AND software_edition=lts
vendor=canonical AND product=ubuntu_linux AND version=16.04 AND software_edition=esm
OR
vendor=netapp AND product=cloud_backup AND version=-
vendor=netapp AND product=solidfire\,_enterprise_sds_\&_hci_storage_node AND version=-
OR
vendor=brocade AND product=fabric_operating_system AND version=-
AND
OR
vendor=netapp AND product=hci_compute_node_firmware AND version=-
OR
vendor=netapp AND product=hci_compute_node AND version=-
OR
vendor=Debian AND product=debian_linux AND version=9.0
OR
vendor=siemens AND product=sinec_infrastructure_network_services AND versionEndExcluding=1.0.1.1
OR
vendor=apple AND product=iphone_os AND versionEndExcluding=14.0
vendor=apple AND product=watchos AND versionEndExcluding=7.0
vendor=apple AND product=tvos AND versionEndExcluding=14.0
vendor=apple AND product=ipados AND versionEndExcluding=14.0
vendor=apple AND product=icloud AND target_software=windows AND versionEndExcluding=11.5
vendor=apple AND product=itunes AND target_software=windows AND versionEndExcluding=12.10.9
vendor=apple AND product=macos AND versionEndExcluding=11.0.1
OR
vendor=oracle AND product=outside_in_technology AND version=8.5.4
vendor=oracle AND product=outside_in_technology AND version=8.5.5
vendor=oracle AND product=communications_network_charging_and_control AND version=6.0.1
vendor=oracle AND product=communications_network_charging_and_control AND versionEndIncluding=12.0.3 AND versionStartIncluding=12.0.0
vendor=oracle AND product=zfs_storage_appliance_kit AND version=8.8
 

Reference

 


Keywords

NVD

 

CVE-2020-13630

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.