CVE-2020-9327
21.02.2020, 22:15
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| sqlite | sqlite | 3.31.1 |
| netapp | cloud_backup | - |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 19.10 |
| siemens | sinec_infrastructure_network_services | 𝑥 < 1.0.1.1 |
| oracle | communications_network_charging_and_control | 12.0.0 ≤ 𝑥 ≤ 12.0.3 |
| oracle | communications_network_charging_and_control | 6.0.1 |
| oracle | communications_network_charging_and_control | 12.0.2 |
| oracle | enterprise_manager_ops_center | 12.4.0.0 |
| oracle | hyperion_infrastructure_technology | 11.1.2.4 |
| oracle | mysql_workbench | 𝑥 ≤ 8.0.22 |
| oracle | outside_in_technology | 8.5.4 |
| oracle | outside_in_technology | 8.5.5 |
| oracle | zfs_storage_appliance_kit | 8.8 |
| oracle | communications_messaging_server | 8.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libsqlite3-0 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libsqlite3-0-32bit |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| sqlite3 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| sqlite3-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| sqlite3-tcl |
|
Red Hat Enterprise Linux Releases
Common Weakness Enumeration
References