CVE-2020-13434

תיאור (מקור, אנגלית)

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

מדדים

CVSS 3.1

5.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — סבירות ניצול

1% (אחוזון 100) נכון ל-18/10/2026

CWE

CWE-190

מוצרים מושפעים

sqlite: sqlite; debian: debian linux; fedoraproject: fedora; canonical: ubuntu linux; freebsd: freebsd; oracle: communications cloud native core policy; oracle: communications network charging and control; oracle: outside in technology; apple: icloud; apple: itunes; apple: ipados; apple: iphone os; apple: macos; apple: tvos; apple: watchos

קישורים

• https://www.sqlite.org/src/info/23439ea582241138 ExploitPatchVendor Advisory
• https://www.sqlite.org/src/info/d08d3405878d394e PatchVendor Advisory
• https://www.sqlite.org/src/info/23439ea582241138 ExploitPatchVendor Advisory
• https://www.sqlite.org/src/info/d08d3405878d394e PatchVendor Advisory
• https://www.oracle.com/security-alerts/cpuApr2021.html PatchThird Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory
• https://www.oracle.com/security-alerts/cpujul2020.html PatchThird Party Advisory
• https://www.oracle.com/security-alerts/cpuApr2021.html PatchThird Party Advisory
• https://www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory
• https://www.oracle.com/security-alerts/cpujul2020.html PatchThird Party Advisory