CVE-2021-20227
23.03.2021, 17:15
A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.Enginsight
| Vendor | Product | Version |
|---|---|---|
| sqlite | sqlite | 3.33.0 ≤ 𝑥 < 3.34.1 |
| oracle | communications_network_charging_and_control | 12.0.1.0 ≤ 𝑥 ≤ 12.0.4.0.0 |
| oracle | communications_network_charging_and_control | 6.0.1 |
| oracle | enterprise_manager_for_oracle_database | 13.4.0.0 |
| oracle | jd_edwards_enterpriseone_tools | 𝑥 < 9.2.6.0 |
| oracle | mysql_workbench | 𝑥 ≤ 8.0.26 |
| oracle | outside_in_technology | 8.5.5 |
| oracle | zfs_storage_appliance_kit | 8.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References