ISOMAN

CVE

CVE-2020-15358

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

Severity
MEDIUM
CVSS
5.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource

References

  1. http://seclists.org/fulldisclosure/2020/Dec/32
  2. http://seclists.org/fulldisclosure/2020/Nov/19
  3. http://seclists.org/fulldisclosure/2020/Nov/20
  4. http://seclists.org/fulldisclosure/2020/Nov/22
  5. http://seclists.org/fulldisclosure/2021/Feb/14
  6. https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
  7. https://security.gentoo.org/glsa/202007-26
  8. https://security.netapp.com/advisory/ntap-20200709-0001/
  9. https://support.apple.com/kb/HT211843
  10. https://support.apple.com/kb/HT211844
  11. https://support.apple.com/kb/HT211847
  12. https://support.apple.com/kb/HT211850
  13. https://support.apple.com/kb/HT211931
  14. https://support.apple.com/kb/HT212147
  15. https://usn.ubuntu.com/4438-1/
  16. https://www.oracle.com/security-alerts/cpuApr2021.html
  17. https://www.oracle.com/security-alerts/cpuapr2022.html
  18. https://www.oracle.com/security-alerts/cpujan2021.html
  19. https://www.oracle.com/security-alerts/cpuoct2020.html
  20. https://www.sqlite.org/src/info/10fa79d00f8091e5