CVE-2020-13630high
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
References
http://seclists.org/fulldisclosure/2020/Dec/32
http://seclists.org/fulldisclosure/2020/Nov/19
http://seclists.org/fulldisclosure/2020/Nov/20
http://seclists.org/fulldisclosure/2020/Nov/22
https://bugs.chromium.org/p/chromium/issues/detail?id=1080459
https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc
https://security.gentoo.org/glsa/202007-26
https://security.netapp.com/advisory/ntap-20200608-0002/
https://sqlite.org/src/info/0d69f76f0865f962
https://support.apple.com/kb/HT211843
https://support.apple.com/kb/HT211844
https://support.apple.com/kb/HT211850
https://support.apple.com/kb/HT211931
https://support.apple.com/kb/HT211935
https://support.apple.com/kb/HT211952
https://usn.ubuntu.com/4394-1/
Details
Source: MITRE
Published: 2020-05-27
Updated: 2020-12-15
Type: CWE-416
Risk Information
CVSS v2
Base Score: 4.4
Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Impact Score: 6.4
Exploitability Score: 3.4
Severity: MEDIUM
CVSS v3
Base Score: 7
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 1
Severity: HIGH
Vulnerable Software
Configuration 1
OR
Configuration 2
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 153643 | SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2021:3215-1) | Nessus | SuSE Local Security Checks | critical |
| 152986 | Tenable SecurityCenter < 5.19.0 Multiple Vulnerabilities (TNS-2021-14) | Nessus | Misc. | high |
| 151985 | Tenable.sc < 5.19.0 Multiple Vulnerabilities (TNS-2021-14) (deprecated) | Nessus | Misc. | high |
| 151816 | openSUSE 15 Security Update : sqlite3 (openSUSE-SU-2021:1058-1) | Nessus | SuSE Local Security Checks | critical |
| 151748 | openSUSE 15 Security Update : sqlite3 (openSUSE-SU-2021:2320-1) | Nessus | SuSE Local Security Checks | critical |
| 151654 | SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2021:2320-1) | Nessus | SuSE Local Security Checks | critical |
| 149744 | CentOS 8 : mingw packages (CESA-2021:1968) | Nessus | CentOS Local Security Checks | high |
| 149666 | RHEL 8 : mingw packages (RHSA-2021:1968) | Nessus | Red Hat Local Security Checks | high |
| 147397 | NewStart CGSL MAIN 6.02 : sqlite Multiple Vulnerabilities (NS-SA-2021-0064) | Nessus | NewStart CGSL Local Security Checks | high |
| 145815 | CentOS 8 : sqlite (CESA-2020:4442) | Nessus | CentOS Local Security Checks | high |
| 143115 | macOS 11.0.x < 11.0.1 | Nessus | MacOS X Local Security Checks | high |
| 142752 | Oracle Linux 8 : sqlite (ELSA-2020-4442) | Nessus | Oracle Linux Local Security Checks | high |
| 142429 | RHEL 8 : sqlite (RHSA-2020:4442) | Nessus | Red Hat Local Security Checks | high |
| 139157 | EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1827) | Nessus | Huawei Local Security Checks | high |
| 138949 | GLSA-202007-26 : SQLite: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | critical |
| 137800 | EulerOS Virtualization for ARM 64 3.0.6.0 : sqlite (EulerOS-SA-2020-1693) | Nessus | Huawei Local Security Checks | high |
| 137439 | FreeBSD : several security issues in sqlite3 (c4ac9c79-ab37-11ea-8b5e-b42e99a1b9c3) | Nessus | FreeBSD Local Security Checks | high |
| 137353 | Ubuntu 16.04 LTS / 18.04 LTS / 19.10 / 20.04 : SQLite vulnerabilities (USN-4394-1) | Nessus | Ubuntu Local Security Checks | high |
| 137322 | Photon OS 1.0: Sqlite PHSA-2020-1.0-0298 | Nessus | PhotonOS Local Security Checks | high |
| 137193 | Photon OS 2.0: Sqlite PHSA-2020-2.0-0249 | Nessus | PhotonOS Local Security Checks | high |
| 137188 | Photon OS 3.0: Sqlite PHSA-2020-3.0-0101 | Nessus | PhotonOS Local Security Checks | high |
| 137102 | Fedora 32 : sqlite (2020-0477f8840e) | Nessus | Fedora Local Security Checks | high |