IM
IronMonkey Threat Research

CVE-2020-13630 HIGH

Published: 2020-05-27 | Last Modified: 2024-11-21 | Status: Modified

Description

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

Additional Descriptions (1)

El archivo ext/fts3/fts3.c en SQLite versiones anteriores a la versión 3.32.0, tiene un uso de la memoria previamente liberada en la función fts3EvalNextRow, relacionado con la funcionalidad snippet.

CVSS Metrics

Base Score: 7.0 (HIGH)

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.0

Impact Score: 5.9

Base Score: 4.4 (MEDIUM)

AV:L/AC:M/Au:N/C:P/I:P/A:P

Access VectorLOCAL
Access ComplexityMEDIUM
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactPARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 3.4

Impact Score: 6.4

Weaknesses

Source Type Description
[email protected] Primary
en CWE-416

Affected Products

Vendor Product Version Update Type
sqlite sqlite * <built-in method update of dict object at 0x7fd2dbdc01c0> Application
fedoraproject fedora 32 <built-in method update of dict object at 0x7fd2d829e840> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x7fd39c4e0f80> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x7fd38546ba00> Operating System
canonical ubuntu_linux 19.10 <built-in method update of dict object at 0x7fd2dbdc1640> Operating System
canonical ubuntu_linux 20.04 <built-in method update of dict object at 0x7fd2dbdc3bc0> Operating System
netapp cloud_backup - <built-in method update of dict object at 0x7fd39c4e1d80> Application
netapp solidfire\,_enterprise_sds_\&_hci_storage_node - <built-in method update of dict object at 0x7fd2dbc82440> Application
brocade fabric_operating_system - <built-in method update of dict object at 0x7fd39c4e1880> Operating System
netapp hci_compute_node_firmware - <built-in method update of dict object at 0x7fd2dbdc1280> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd39c4e2d80> Operating System
siemens sinec_infrastructure_network_services * <built-in method update of dict object at 0x7fd39c4e04c0> Application
apple icloud * <built-in method update of dict object at 0x7fd39c4e34c0> Application
apple itunes * <built-in method update of dict object at 0x7fd38546bb00> Application
apple ipados * <built-in method update of dict object at 0x7fd348bb9ac0> Operating System
apple iphone_os * <built-in method update of dict object at 0x7fd2dbc82100> Operating System
apple macos * <built-in method update of dict object at 0x7fd3848faa80> Operating System
apple tvos * <built-in method update of dict object at 0x7fd39c4e2200> Operating System
apple watchos * <built-in method update of dict object at 0x7fd2dbc83080> Operating System
oracle communications_network_charging_and_control * <built-in method update of dict object at 0x7fd39c4e01c0> Application
oracle communications_network_charging_and_control 6.0.1 <built-in method update of dict object at 0x7fd348bb9e80> Application
oracle outside_in_technology 8.5.4 <built-in method update of dict object at 0x7fd2dbc81900> Application
oracle outside_in_technology 8.5.5 <built-in method update of dict object at 0x7fd39c4e14c0> Application
oracle zfs_storage_appliance_kit 8.8 <built-in method update of dict object at 0x7fd340af5e00> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:brocade:fabric_operating_system:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
Yes cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
Yes cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*
Yes cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

References