Orta CVSS 5.5 PoC var

CVE-2020-15358: Sqlite: sınır dışı yazma

Yayın: 27 Haziran 2020 15:15 · Güncelleme: 6 Kasım 2026 09:46

Açıklama (NVD)

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

Özet bilgiler

Ürün: Sqlite Sqlite
CVSS v3.1: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: %1,02 (yüzdelik 64)
CWE: CWE-787
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
sqlite-sqlite	—	—	3.32.3
canonical-ubuntu-linux	20.04	20.04	—
apple-icloud	—	—	7.21
apple-ipados	—	—	14.0
apple-iphone-os	—	—	14.0
apple-macos	—	—	11.0.1
apple-tvos	—	—	14.0
apple-watchos	—	—	7.0
oracle-communications-cloud-native-core-policy	1.14.0	1.14.0	—
oracle-communications-messaging-server	8.1	8.1	—
oracle-communications-network-charging-and-control	6.0.1	6.0.1	—
oracle-communications-network-charging-and-control	12.0.2	12.0.2	—
oracle-enterprise-manager-ops-center	12.4.0.0	12.4.0.0	—
oracle-hyperion-infrastructure-technology	11.1.2.4	11.1.2.4	—
oracle-mysql	—	8.0.22	—
oracle-outside-in-technology	8.5.4	8.5.4	—
oracle-outside-in-technology	8.5.5	8.5.5	—
siemens-sinec-infrastructure-network-services	—	—	1.0.1.1

Kaynaklar

Uygulamada aç Tüm CVE kayıtları