← All advisories

Unrated severityNVD Advisory· Published Jun 6, 2020· Updated Aug 4, 2024

CVE-2020-13871

CVE-2020-13871

Description

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

SQLite/SQLitedescription
SQLite/SQLitellm-fuzzy
Range: =3.32.2
osv-coords2 versions
pkg:bitnami/sqlite pkg:rpm/opensuse/sqlite3&distro=openSUSE%20Tumbleweed
>= 3.32.2, < 3.32.3+ 1 more
- (no CPE)range: >= 3.32.2, < 3.32.3
- (no CPE)range: < 3.36.0-1.2

Patches

Vulnerability mechanics

References

10

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BN32AGQPMHZRNM6P6L5GZPETOWTGXOKP/mitrevendor-advisoryx_refsource_FEDORA
security.gentoo.org/glsa/202007-26mitrevendor-advisoryx_refsource_GENTOO
cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfmitrex_refsource_CONFIRM
lists.debian.org/debian-lts-announce/2020/08/msg00037.htmlmitremailing-listx_refsource_MLIST
security.netapp.com/advisory/ntap-20200619-0002/mitrex_refsource_CONFIRM
www.oracle.com/security-alerts/cpuApr2021.htmlmitrex_refsource_MISC
www.oracle.com/security-alerts/cpujan2021.htmlmitrex_refsource_MISC
www.sqlite.org/src/info/79eff1d0383179c4mitrex_refsource_MISC
www.sqlite.org/src/info/c8d3b9f0a750a529mitrex_refsource_MISC
www.sqlite.org/src/info/cd708fa84d2aaaeamitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.