CVE-2020-9327

Опубликовано: 21 фев. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

Ссылки

https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Patch
Third Party Advisory
https://security.gentoo.org/glsa/202003-16
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200313-0002/
Third Party Advisory
https://usn.ubuntu.com/4298-1/
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html
Patch
Third Party Advisory
https://www.sqlite.org/cgi/src/info/4374860b29383380
Vendor Advisory
https://www.sqlite.org/cgi/src/info/9d0d4ab95dc0c56e
Patch
Vendor Advisory
https://www.sqlite.org/cgi/src/info/abc473fb8fb99900
Patch
Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
Patch
Third Party Advisory
https://security.gentoo.org/glsa/202003-16
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200313-0002/
Third Party Advisory
https://usn.ubuntu.com/4298-1/
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html
Patch
Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html
Patch
Third Party Advisory
https://www.sqlite.org/cgi/src/info/4374860b29383380
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sqlite:sqlite:3.31.1:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

Версия до 1.0.1.1 (исключая)

Конфигурация 5

Одно из

cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*

Версия от 12.0.0 (включая) до 12.0.3 (включая)

cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*

Версия до 8.0.22 (включая)

cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

cpe:2.3:o:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01401

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2020-9327

CVSS3: 7.5

ubuntu

больше 5 лет назад

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

CVE-2020-9327

CVSS3: 6.5

redhat

больше 5 лет назад

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

CVE-2020-9327

CVSS3: 7.5

debian

больше 5 лет назад

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger ...

GHSA-43wf-f579-3w62

CVSS3: 7.5

github

больше 3 лет назад

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

BDU:2020-03619

CVSS3: 7.5

fstec

больше 5 лет назад

Уязвимость компонента isAuxiliaryVtabOperator системы управления базами данных SQLite, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 80%

0.01401

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-476