Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-9327

Опубликовано: 21 фев. 2020
Источник: redhat
CVSS3: 6.5

Описание

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

A NULL pointer dereference was found in SQLite in the way it executes select statements with column optimizations. An attacker who is able to execute SQL statements can use this flaw to crash the application.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5sqliteOut of support scope
Red Hat Enterprise Linux 6sqliteOut of support scope
Red Hat Enterprise Linux 7sqliteNot affected
Red Hat Enterprise Linux 8sqliteFixedRHSA-2020:444204.11.2020
Red Hat Enterprise Linux 8sqliteFixedRHSA-2020:444204.11.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1809315sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

CVSS3: 7.5
nvd
больше 5 лет назад

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

CVSS3: 7.5
debian
больше 5 лет назад

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger ...

CVSS3: 7.5
github
больше 3 лет назад

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

CVSS3: 7.5
fstec
больше 5 лет назад

Уязвимость компонента isAuxiliaryVtabOperator системы управления базами данных SQLite, позволяющая нарушителю вызвать отказ в обслуживании

6.5 Medium

CVSS3