CVE-2020-13632

MEDIUM EPSS 42.9%
Published May 27, 20206y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 27, 2020 6y ago
Last Modified Jun 17, 2026 2w ago

Description

ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
42.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 18

VendorProductVersionRange
sqlitesqlite* <3.32.0
fedoraprojectfedora32any
canonicalubuntu_linux16.04any
canonicalubuntu_linux18.04any
canonicalubuntu_linux19.10any
canonicalubuntu_linux20.04any
netappcloud_backup*any
netappsolidfire\,_enterprise_sds_\&_hci_storage_node*any
brocadefabric_operating_system*any
netapphci_compute_node_firmware*any
netapphci_compute_node*any
debiandebian_linux9.0any
siemenssinec_infrastructure_network_services* <1.0.1.1
oraclecommunications_network_charging_and_control*≥12.0.0  –  ≤12.0.3
oraclecommunications_network_charging_and_control6.0.1any
oracleoutside_in_technology8.5.4any
oracleoutside_in_technology8.5.5any
oraclezfs_storage_appliance_kit8.8any

References 11

  • bugs.chromium.org https://bugs.chromium.org/p/chromium/issues/detail?id=1080459
    Permissions RequiredThird Party Advisory
  • cert-portal.siemens.com https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
    PatchThird Party Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html
    Third Party Advisory
  • lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/
  • security.freebsd.org https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc
    MitigationThird Party Advisory
  • security.gentoo.org https://security.gentoo.org/glsa/202007-26
    Third Party Advisory
  • security.netapp.com https://security.netapp.com/advisory/ntap-20200608-0002/
    Third Party Advisory
  • sqlite.org https://sqlite.org/src/info/a4dd148928ea65bd
    Vendor Advisory
  • usn.ubuntu.com https://usn.ubuntu.com/4394-1/
    PatchThird Party Advisory
  • oracle.com https://www.oracle.com/security-alerts/cpujul2020.html
    Third Party Advisory
  • oracle.com https://www.oracle.com/security-alerts/cpuoct2020.html
    Third Party Advisory

Remediation

  • cert-portal.siemens.com https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
    PatchThird Party Advisory
  • usn.ubuntu.com https://usn.ubuntu.com/4394-1/
    PatchThird Party Advisory