← Back

CVE-2020-13434

nvd nist
Published: May 24, 2020Modified: Oct 14, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

Affected (43)

Products: Sqlite: Sqlite · Debian: Debian Linux · Fedoraproject: Fedora · +4 more
Show all products
Sqlite: Sqlite · Debian: Debian Linux · Fedoraproject: Fedora · Canonical: Ubuntu Linux · Freebsd: Freebsd · Oracle: Communications Cloud Native Core Policy, Communications Network Charging And Control, Outside In Technology · Apple: Icloud, Ipados, Iphone Os, Itunes, Macos, Tvos, Watchos
Sqlite
1 product
Sqlite
Debian
1 product
Debian Linux
Fedoraproject
1 product
Fedora
Canonical
1 product
Ubuntu Linux
Freebsd
1 product
Freebsd
Oracle
3 products
Communications Cloud Native Core Policy
Communications Network Charging And Control
Outside In Technology
Apple
7 products
Icloud
Ipados
Iphone Os
Itunes
Macos
Tvos
Watchos
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Sqlite
version ≤ 3.32.0
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 8.0
Debian Linux
Version 9.0
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 32
Configuration D
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 16.04
Ubuntu Linux
Version 18.04
Ubuntu Linux
Version 19.10
Ubuntu Linux
Version 20.04
Configuration E
24 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
11.0 ≤ version < 11.4
Freebsd
Version 11.4
Freebsd
Version 11.4 p1
Freebsd
Version 12.0
Freebsd
Version 12.0 p10
Freebsd
Version 12.0 p11
Freebsd
Version 12.0 p12
Freebsd
Version 12.0 p1
Freebsd
Version 12.0 p2
Freebsd
Version 12.0 p3
Freebsd
Version 12.0 p4
Freebsd
Version 12.0 p5
Freebsd
Version 12.0 p6
Freebsd
Version 12.0 p7
Freebsd
Version 12.0 p8
Freebsd
Version 12.0 p9
Freebsd
Version 12.1
Freebsd
Version 12.1 p1
Freebsd
Version 12.1 p2
Freebsd
Version 12.1 p3
Freebsd
Version 12.1 p4
Freebsd
Version 12.1 p5
Freebsd
Version 12.1 p6
Freebsd
Version 12.1 p7
Configuration F
4 vulnerable
Vulnerable SoftwareAffected Versions
Communications Cloud Native Core Policy
Version 1.14.0
Oracle
Communications Network Charging And Control
12.0.0 ≤ version ≤ 12.0.3
Communications Network Charging And Control
Version 6.0.1
Outside In Technology
Version 8.5.5
Configuration G
7 vulnerable
Vulnerable SoftwareAffected Versions
Icloud
version < 11.5
Ipados
version < 14.0
Iphone Os
version < 14.0
Itunes
version < 12.10.9
Macos
11.0 ≤ version < 11.0.1
Tvos
version < 14.0
Watchos
version < 7.0

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (45)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.