← Back

CVE-2020-13871

nvd nist
Published: Jun 6, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

Affected (13)

Products: Sqlite: Sqlite · Fedoraproject: Fedora · Debian: Debian Linux · +3 more
Show all products
Sqlite: Sqlite · Fedoraproject: Fedora · Debian: Debian Linux · Oracle: Communications Messaging Server, Communications Network Charging And Control, Enterprise Manager Ops Center, Hyperion Infrastructure Technology, Mysql Workbench, Zfs Storage Appliance Kit · Siemens: Sinec Infrastructure Network Services · Netapp: Cloud Backup, Ontap Select Deploy Administration Utility
Sqlite
1 product
Sqlite
Fedoraproject
1 product
Fedora
Debian
1 product
Debian Linux
Oracle
6 products
Communications Messaging Server
Communications Network Charging And Control
Enterprise Manager Ops Center
Hyperion Infrastructure Technology
Mysql Workbench
Zfs Storage Appliance Kit
Siemens
1 product
Sinec Infrastructure Network Services
Netapp
2 products
Cloud Backup
Ontap Select Deploy Administration Utility
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Sqlite
Version 3.32.2
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fedora
Version 33
Configuration C
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 9.0
Configuration D
7 vulnerable
Vulnerable SoftwareAffected Versions
Communications Messaging Server
Version 8.1
Oracle
Communications Network Charging And Control
Version 12.0.2
Communications Network Charging And Control
Version 6.0.1
Enterprise Manager Ops Center
Version 12.4.0.0
Hyperion Infrastructure Technology
Version 11.1.2.4
Mysql Workbench
Up to 8.0.22
Zfs Storage Appliance Kit
Version 8.8
Configuration E
1 vulnerable
Vulnerable SoftwareAffected Versions
Sinec Infrastructure Network Services
Before 1.0.1.1
Configuration F
2 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Ontap Select Deploy Administration Utility
All versions

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (20)

Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
MitigationThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
ExploitVendor Advisory
Source: cve@mitre.org
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory

Timeline

No history available yet.