High severity7.5NVD Advisory· Published Jun 6, 2020· Updated Jun 17, 2026
CVE-2020-13871
CVE-2020-13871
Description
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17- SQLite/SQLitedescription
- osv-coords2 versions
>= 3.32.2, < 3.32.3+ 1 more
- (no CPE)range: >= 3.32.2, < 3.32.3
- (no CPE)range: < 3.36.0-1.2
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
- cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*Range: <1.0.1.1
- cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
- cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
10- cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfnvdPatchThird Party Advisory
- www.sqlite.org/src/info/79eff1d0383179c4nvdPatchVendor Advisory
- www.sqlite.org/src/info/c8d3b9f0a750a529nvdExploitVendor Advisory
- www.sqlite.org/src/info/cd708fa84d2aaaeanvdExploitVendor Advisory
- lists.debian.org/debian-lts-announce/2020/08/msg00037.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/202007-26nvdMitigationThird Party Advisory
- security.netapp.com/advisory/ntap-20200619-0002/nvdThird Party Advisory
- www.oracle.com/security-alerts/cpuApr2021.htmlnvdThird Party Advisory
- www.oracle.com/security-alerts/cpujan2021.htmlnvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BN32AGQPMHZRNM6P6L5GZPETOWTGXOKP/nvd
News mentions
0No linked articles in our index yet.