Vulnerabilities > CVE-2020-13434 - Integer Overflow or Wraparound vulnerability in multiple products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

nessus

NVD

Published: 2020-05-24

Updated: 2024-11-21

Summary

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

Vulnerable Configurations

Part	Description	Count
Application	Sqlite Sqlite Sqlite 1.0 Sqlite Sqlite 1.0.1 Sqlite Sqlite 1.0.3 Sqlite Sqlite 1.0.4 Sqlite Sqlite 1.0.5 Sqlite Sqlite 1.0.8 Sqlite Sqlite 1.0.9 Sqlite Sqlite 1.0.10 Sqlite Sqlite 1.0.12 Sqlite Sqlite 1.0.13 Sqlite Sqlite 1.0.14 Sqlite Sqlite 1.0.15 Sqlite Sqlite 1.0.16 Sqlite Sqlite 1.0.17 Sqlite Sqlite 1.0.18 Sqlite Sqlite 1.0.19 Sqlite Sqlite 1.0.20 Sqlite Sqlite 1.0.21 Sqlite Sqlite 1.0.22 Sqlite Sqlite 1.0.23 Sqlite Sqlite 1.0.24 Sqlite Sqlite 1.0.25 Sqlite Sqlite 1.0.26 Sqlite Sqlite 1.0.27 Sqlite Sqlite 1.0.28 Sqlite Sqlite 1.0.29 Sqlite Sqlite 1.0.30 Sqlite Sqlite 1.0.31 Sqlite Sqlite 1.0.32 Sqlite Sqlite 2.0.0 Sqlite Sqlite 2.0.1 Sqlite Sqlite 2.0.2 Sqlite Sqlite 2.0.3 Sqlite Sqlite 2.0.4 Sqlite Sqlite 2.0.5 Sqlite Sqlite 2.0.6 Sqlite Sqlite 2.0.7 Sqlite Sqlite 2.0.8 Sqlite Sqlite 2.1.0 Sqlite Sqlite 2.1.1 Sqlite Sqlite 2.1.2 Sqlite Sqlite 2.1.3 Sqlite Sqlite 2.1.4 Sqlite Sqlite 2.1.5 Sqlite Sqlite 2.1.6 Sqlite Sqlite 2.1.7 Sqlite Sqlite 2.2.0 Sqlite Sqlite 2.2.1 Sqlite Sqlite 2.2.2 Sqlite Sqlite 2.2.3 Sqlite Sqlite 2.2.4 Sqlite Sqlite 2.2.5 Sqlite Sqlite 2.3.0 Sqlite Sqlite 2.3.1 Sqlite Sqlite 2.3.2 Sqlite Sqlite 2.3.3 Sqlite Sqlite 2.4.0 Sqlite Sqlite 2.4.1 Sqlite Sqlite 2.4.2 Sqlite Sqlite 2.4.3 Sqlite Sqlite 2.4.4 Sqlite Sqlite 2.4.5 Sqlite Sqlite 2.4.6 Sqlite Sqlite 2.4.7 Sqlite Sqlite 2.4.8 Sqlite Sqlite 2.4.9 Sqlite Sqlite 2.4.10 Sqlite Sqlite 2.4.11 Sqlite Sqlite 2.4.12 Sqlite Sqlite 2.5.0 Sqlite Sqlite 2.5.1 Sqlite Sqlite 2.5.2 Sqlite Sqlite 2.5.3 Sqlite Sqlite 2.5.4 Sqlite Sqlite 2.5.5 Sqlite Sqlite 2.5.6 Sqlite Sqlite 2.6.0 Sqlite Sqlite 2.6.1 Sqlite Sqlite 2.6.2 Sqlite Sqlite 2.6.3 Sqlite Sqlite 2.7.0 Sqlite Sqlite 2.7.1 Sqlite Sqlite 2.7.2 Sqlite Sqlite 2.7.3 Sqlite Sqlite 2.7.4 Sqlite Sqlite 2.7.5 Sqlite Sqlite 2.7.6 Sqlite Sqlite 2.8.0 Sqlite Sqlite 2.8.1 Sqlite Sqlite 2.8.2 Sqlite Sqlite 2.8.3 Sqlite Sqlite 2.8.4 Sqlite Sqlite 2.8.5 Sqlite Sqlite 2.8.6 Sqlite Sqlite 2.8.7 Sqlite Sqlite 2.8.8 Sqlite Sqlite 2.8.9 Sqlite Sqlite 2.8.10 Sqlite Sqlite 2.8.11 Sqlite Sqlite 2.8.12 Sqlite Sqlite 2.8.13 Sqlite Sqlite 2.8.14 Sqlite Sqlite 2.8.15 Sqlite Sqlite 2.8.16 Sqlite Sqlite 2.8.17 Sqlite Sqlite 3.0.0 Sqlite Sqlite 3.0.1 Sqlite Sqlite 3.0.2 Sqlite Sqlite 3.0.3 Sqlite Sqlite 3.0.4 Sqlite Sqlite 3.0.5 Sqlite Sqlite 3.0.6 Sqlite Sqlite 3.0.7 Sqlite Sqlite 3.0.8 Sqlite Sqlite 3.1.0 Sqlite Sqlite 3.1.1 Sqlite Sqlite 3.1.2 Sqlite Sqlite 3.1.3 Sqlite Sqlite 3.1.3.1 Sqlite Sqlite 3.1.4 Sqlite Sqlite 3.1.5 Sqlite Sqlite 3.1.6 Sqlite Sqlite 3.2.0 Sqlite Sqlite 3.2.1 Sqlite Sqlite 3.2.2 Sqlite Sqlite 3.2.3 Sqlite Sqlite 3.2.4 Sqlite Sqlite 3.2.5 Sqlite Sqlite 3.2.6 Sqlite Sqlite 3.2.7 Sqlite Sqlite 3.2.8 Sqlite Sqlite 3.3.0 Sqlite Sqlite 3.3.1 Sqlite Sqlite 3.3.2 Sqlite Sqlite 3.3.3 Sqlite Sqlite 3.3.4 Sqlite Sqlite 3.3.5 Sqlite Sqlite 3.3.6 Sqlite Sqlite 3.3.7 Sqlite Sqlite 3.3.8 Sqlite Sqlite 3.3.9 Sqlite Sqlite 3.3.10 Sqlite Sqlite 3.3.11 Sqlite Sqlite 3.3.12 Sqlite Sqlite 3.3.13 Sqlite Sqlite 3.3.14 Sqlite Sqlite 3.3.15 Sqlite Sqlite 3.3.16 Sqlite Sqlite 3.3.17 Sqlite Sqlite 3.4.0 Sqlite Sqlite 3.4.1 Sqlite Sqlite 3.4.2 Sqlite Sqlite 3.5.0 Sqlite Sqlite 3.5.1 Sqlite Sqlite 3.5.2 Sqlite Sqlite 3.5.3 Sqlite Sqlite 3.5.4 Sqlite Sqlite 3.5.5 Sqlite Sqlite 3.5.6 Sqlite Sqlite 3.5.7 Sqlite Sqlite 3.5.8 Sqlite Sqlite 3.5.9 Sqlite Sqlite 3.6.0 Sqlite Sqlite 3.6.1 Sqlite Sqlite 3.6.2 Sqlite Sqlite 3.6.3 Sqlite Sqlite 3.6.4 Sqlite Sqlite 3.6.5 Sqlite Sqlite 3.6.6 Sqlite Sqlite 3.6.6.1 Sqlite Sqlite 3.6.6.2 Sqlite Sqlite 3.6.7 Sqlite Sqlite 3.6.8 Sqlite Sqlite 3.6.9 Sqlite Sqlite 3.6.10 Sqlite Sqlite 3.6.11 Sqlite Sqlite 3.6.12 Sqlite Sqlite 3.6.13 Sqlite Sqlite 3.6.14 Sqlite Sqlite 3.6.14.1 Sqlite Sqlite 3.6.14.2 Sqlite Sqlite 3.6.15 Sqlite Sqlite 3.6.16 Sqlite Sqlite 3.6.16.1 Sqlite Sqlite 3.6.17 Sqlite Sqlite 3.6.18 Sqlite Sqlite 3.6.19 Sqlite Sqlite 3.6.20 Sqlite Sqlite 3.6.21 Sqlite Sqlite 3.6.22 Sqlite Sqlite 3.6.23 Sqlite Sqlite 3.6.23.1 Sqlite Sqlite 3.7.0 Sqlite Sqlite 3.7.0.1 Sqlite Sqlite 3.7.1 Sqlite Sqlite 3.7.2 Sqlite Sqlite 3.7.3 Sqlite Sqlite 3.7.4 Sqlite Sqlite 3.7.5 Sqlite Sqlite 3.7.6 Sqlite Sqlite 3.7.6.1 Sqlite Sqlite 3.7.6.2 Sqlite Sqlite 3.7.6.3 Sqlite Sqlite 3.7.7 Sqlite Sqlite 3.7.7.1 Sqlite Sqlite 3.7.8 Sqlite Sqlite 3.7.9 Sqlite Sqlite 3.7.10 Sqlite Sqlite 3.7.11 Sqlite Sqlite 3.7.12 Sqlite Sqlite 3.7.12.1 Sqlite Sqlite 3.7.13 Sqlite Sqlite 3.7.14 Sqlite Sqlite 3.7.14.1 Sqlite Sqlite 3.7.15 Sqlite Sqlite 3.7.15.1 Sqlite Sqlite 3.7.15.2 Sqlite Sqlite 3.7.16 Sqlite Sqlite 3.7.16.1 Sqlite Sqlite 3.7.16.2 Sqlite Sqlite 3.7.17 Sqlite Sqlite 3.8.0 Sqlite Sqlite 3.8.0.1 Sqlite Sqlite 3.8.0.2 Sqlite Sqlite 3.8.1 Sqlite Sqlite 3.8.2 Sqlite Sqlite 3.8.3 Sqlite Sqlite 3.8.3.1 Sqlite Sqlite 3.8.4 Sqlite Sqlite 3.8.4.1 Sqlite Sqlite 3.8.4.2 Sqlite Sqlite 3.8.4.3 Sqlite Sqlite 3.8.5 Sqlite Sqlite 3.8.6 Sqlite Sqlite 3.8.6.1 Sqlite Sqlite 3.8.7 Sqlite Sqlite 3.8.7.1 Sqlite Sqlite 3.8.7.2 Sqlite Sqlite 3.8.7.3 Sqlite Sqlite 3.8.7.4 Sqlite Sqlite 3.8.8 Sqlite Sqlite 3.8.8.1 Sqlite Sqlite 3.8.8.2 Sqlite Sqlite 3.8.8.3 Sqlite Sqlite 3.8.9 Sqlite Sqlite 3.8.10 Sqlite Sqlite 3.8.10.1 Sqlite Sqlite 3.8.10.2 Sqlite Sqlite 3.8.11 Sqlite Sqlite 3.8.11.1 Sqlite Sqlite 3.9.0 Sqlite Sqlite 3.9.1 Sqlite Sqlite 3.9.2 Sqlite Sqlite 3.9.3 Sqlite Sqlite 3.10.0 Sqlite Sqlite 3.10.1 Sqlite Sqlite 3.10.2 Sqlite Sqlite 3.11.0 Sqlite Sqlite 3.11.1 Sqlite Sqlite 3.12.0 Sqlite Sqlite 3.12.1 Sqlite Sqlite 3.12.2 Sqlite Sqlite 3.13.0 Sqlite Sqlite 3.14 Sqlite Sqlite 3.14.1 Sqlite Sqlite 3.14.2 Sqlite Sqlite 3.15.0 Sqlite Sqlite 3.15.1 Sqlite Sqlite 3.15.2 Sqlite Sqlite 3.16.0 Sqlite Sqlite 3.16.1 Sqlite Sqlite 3.16.2 Sqlite Sqlite 3.17.0 Sqlite Sqlite 3.18.0 Sqlite Sqlite 3.18.1 Sqlite Sqlite 3.18.2 Sqlite Sqlite 3.19.0 Sqlite Sqlite 3.19.1 Sqlite Sqlite 3.19.2 Sqlite Sqlite 3.19.3 Sqlite Sqlite 3.20.0 Sqlite Sqlite 3.20.1 Sqlite Sqlite 3.21.0 Sqlite Sqlite 3.22.0 Sqlite Sqlite 3.23.0 Sqlite Sqlite 3.23.1 Sqlite Sqlite 3.24.0 Sqlite Sqlite 3.25.0 Sqlite Sqlite 3.25.1 Sqlite Sqlite 3.25.02 Sqlite Sqlite 3.25.2 Sqlite Sqlite 3.25.3 Sqlite Sqlite 3.26.0 Sqlite Sqlite 3.27.0 Sqlite Sqlite 3.27.1 Sqlite Sqlite 3.27.2 Sqlite Sqlite 3.28.0 Sqlite Sqlite 3.29.0 Sqlite Sqlite 3.30.0 Sqlite Sqlite 3.30.1 Sqlite Sqlite 3.31.0 Sqlite Sqlite 3.31.1 Sqlite Sqlite 3.32.0	303
Application	Oracle Oracle Outside IN Technology 8.5.5 Oracle Communications Network Charging AND Control 6.0.1 Oracle Communications Network Charging AND Control 12.0.0 Oracle Communications Network Charging AND Control 12.0.1.0 Oracle Communications Network Charging AND Control 12.0.2 Oracle Communications Network Charging AND Control 12.0.3 Oracle Communications Cloud Native Core Policy 1.14.0	7
Application	Apple Apple Icloud 5.2 Apple Icloud 6.1.1 Apple Icloud 6.2 Apple Icloud 7.0 Apple Icloud 7.6 Apple Icloud 7.7 Apple Icloud 7.8.1 Apple Icloud 7.10 Apple Icloud 7.11 Apple Icloud 7.12 Apple Icloud 7.13 Apple Icloud 7.14 Apple Icloud 7.15 Apple Icloud 7.16 Apple Icloud 7.17 Apple Icloud 7.18 Apple Icloud 7.19 Apple Icloud 7.20 Apple Icloud 7.21 Apple Icloud 10.0 Apple Icloud 10.4 Apple Icloud 10.6 Apple Icloud 10.7 Apple Icloud 10.8 Apple Icloud 10.9 Apple Icloud 10.9.2 Apple Icloud 10.9.3 Apple Icloud 11.0 Apple Icloud 11.1 Apple Icloud 11.2 Apple Icloud 11.3 Apple Icloud 11.4 Apple Itunes 12.0.0 Apple Itunes 12.0.4 Apple Itunes 12.1.3 Apple Itunes 12.4.1 Apple Itunes 12.4.3 Apple Itunes 12.5.5 Apple Itunes 12.5.5.5 Apple Itunes 12.8 Apple Itunes 12.9 Apple Itunes 12.9.0 Apple Itunes 12.9.1 Apple Itunes 12.9.2 Apple Itunes 12.9.3 Apple Itunes 12.9.4 Apple Itunes 12.9.5 Apple Itunes 12.9.6 Apple Itunes 12.10.1 Apple Itunes 12.10.2 Apple Itunes 12.10.3 Apple Itunes 12.10.4 Apple Itunes 12.10.5 Apple Itunes 12.10.7 Apple Itunes 12.10.8	55
OS	Debian Debian Debian Linux 8.0 Debian Debian Linux 9.0	2
OS	Fedoraproject Fedoraproject Fedora 32	1
OS	Canonical Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04	4
OS	Freebsd Freebsd Freebsd 12.0 Freebsd Freebsd 12.1 Freebsd Freebsd 11.4 Freebsd Freebsd 11.0 Freebsd Freebsd 11.1 Freebsd Freebsd 11.2 Freebsd Freebsd 11.3	81
OS	Apple Apple Iphone OS - Apple Iphone OS 1.0.0 Apple Iphone OS 1.0.1 Apple Iphone OS 1.0.2 Apple Iphone OS 1.1.0 Apple Iphone OS 1.1.1 Apple Iphone OS 1.1.2 Apple Iphone OS 1.1.3 Apple Iphone OS 1.1.4 Apple Iphone OS 1.1.5 Apple Iphone OS 2.0 Apple Iphone OS 2.0.0 Apple Iphone OS 2.0.1 Apple Iphone OS 2.0.2 Apple Iphone OS 2.1 Apple Iphone OS 2.1.1 Apple Iphone OS 2.2 Apple Iphone OS 2.2.1 Apple Iphone OS 3.0 Apple Iphone OS 3.0.1 Apple Iphone OS 3.1 Apple Iphone OS 3.1.1 Apple Iphone OS 3.1.2 Apple Iphone OS 3.1.3 Apple Iphone OS 3.2 Apple Iphone OS 3.2.1 Apple Iphone OS 3.2.2 Apple Iphone OS 4.0 Apple Iphone OS 4.0.1 Apple Iphone OS 4.0.2 Apple Iphone OS 4.1 Apple Iphone OS 4.2 Apple Iphone OS 4.2.1 Apple Iphone OS 4.2.5 Apple Iphone OS 4.2.6 Apple Iphone OS 4.2.7 Apple Iphone OS 4.2.8 Apple Iphone OS 4.2.9 Apple Iphone OS 4.2.10 Apple Iphone OS 4.3.0 Apple Iphone OS 4.3.1 Apple Iphone OS 4.3.2 Apple Iphone OS 4.3.3 Apple Iphone OS 4.3.4 Apple Iphone OS 4.3.5 Apple Iphone OS 5.0 Apple Iphone OS 5.0.1 Apple Iphone OS 5.1 Apple Iphone OS 5.1.1 Apple Iphone OS 6.0 Apple Iphone OS 6.0.1 Apple Iphone OS 6.0.2 Apple Iphone OS 6.1 Apple Iphone OS 6.1.2 Apple Iphone OS 6.1.3 Apple Iphone OS 6.1.4 Apple Iphone OS 6.1.5 Apple Iphone OS 6.1.6 Apple Iphone OS 7.0 Apple Iphone OS 7.0.1 Apple Iphone OS 7.0.2 Apple Iphone OS 7.0.3 Apple Iphone OS 7.0.4 Apple Iphone OS 7.0.5 Apple Iphone OS 7.0.6 Apple Iphone OS 7.1 Apple Iphone OS 7.1.1 Apple Iphone OS 7.1.2 Apple Iphone OS 8.0 Apple Iphone OS 8.0.1 Apple Iphone OS 8.0.2 Apple Iphone OS 8.1 Apple Iphone OS 8.1.1 Apple Iphone OS 8.1.2 Apple Iphone OS 8.1.3 Apple Iphone OS 8.2 Apple Iphone OS 8.3 Apple Iphone OS 8.4 Apple Iphone OS 8.4.1 Apple Iphone OS 9.0 Apple Iphone OS 9.0.1 Apple Iphone OS 9.0.2 Apple Iphone OS 9.1 Apple Iphone OS 9.2 Apple Iphone OS 9.2.1 Apple Iphone OS 9.3 Apple Iphone OS 9.3.1 Apple Iphone OS 9.3.2 Apple Iphone OS 9.3.3 Apple Iphone OS 9.3.4 Apple Iphone OS 9.3.5 Apple Iphone OS 9.3.6 Apple Iphone OS 10.0 Apple Iphone OS 10.0.1 Apple Iphone OS 10.0.2 Apple Iphone OS 10.0.3 Apple Iphone OS 10.1 Apple Iphone OS 10.1.1 Apple Iphone OS 10.2 Apple Iphone OS 10.2.1 Apple Iphone OS 10.3 Apple Iphone OS 10.3.1 Apple Iphone OS 10.3.2 Apple Iphone OS 10.3.3 Apple Iphone OS 10.3.4 Apple Iphone OS 11 Apple Iphone OS 11.0 Apple Iphone OS 11.0.1 Apple Iphone OS 11.0.2 Apple Iphone OS 11.0.3 Apple Iphone OS 11.1 Apple Iphone OS 11.1.1 Apple Iphone OS 11.1.2 Apple Iphone OS 11.2 Apple Iphone OS 11.2.1 Apple Iphone OS 11.2.2 Apple Iphone OS 11.2.5 Apple Iphone OS 11.2.6 Apple Iphone OS 11.3 Apple Iphone OS 11.3.1 Apple Iphone OS 11.4 Apple Iphone OS 11.4.1 Apple Iphone OS 12.0 Apple Iphone OS 12.0.0 Apple Iphone OS 12.0.1 Apple Iphone OS 12.1 Apple Iphone OS 12.1.1 Apple Iphone OS 12.1.2 Apple Iphone OS 12.1.3 Apple Iphone OS 12.1.4 Apple Iphone OS 12.2 Apple Iphone OS 12.3 Apple Iphone OS 12.3.1 Apple Iphone OS 12.3.2 Apple Iphone OS 12.4 Apple Iphone OS 12.4.1 Apple Iphone OS 12.4.3 Apple Iphone OS 12.4.4 Apple Iphone OS 12.4.7 Apple Iphone OS 12.4.9 Apple Iphone OS 12.5.2 Apple Iphone OS 12.5.3 Apple Iphone OS 12.5.4 Apple Iphone OS 12.5.5 Apple Iphone OS 13.0 Apple Iphone OS 13.1 Apple Iphone OS 13.1.1 Apple Iphone OS 13.1.2 Apple Iphone OS 13.1.3 Apple Iphone OS 13.2 Apple Iphone OS 13.2.2 Apple Iphone OS 13.2.3 Apple Iphone OS 13.3 Apple Iphone OS 13.3.1 Apple Iphone OS 13.4 Apple Iphone OS 13.5 Apple Iphone OS 13.5.1 Apple Iphone OS 13.6 Apple Watchos - Apple Watchos 1.0 Apple Watchos 1.0.1 Apple Watchos 2.0 Apple Watchos 2.0.1 Apple Watchos 2.1 Apple Watchos 2.2 Apple Watchos 2.2.0 Apple Watchos 2.2.1 Apple Watchos 2.2.2 Apple Watchos 3.0 Apple Watchos 3.1 Apple Watchos 3.1.1 Apple Watchos 3.1.3 Apple Watchos 3.2 Apple Watchos 3.2.2 Apple Watchos 3.2.3 Apple Watchos 4 Apple Watchos 4.0 Apple Watchos 4.0.1 Apple Watchos 4.1 Apple Watchos 4.2 Apple Watchos 4.2.3 Apple Watchos 4.3 Apple Watchos 4.3.1 Apple Watchos 4.3.2 Apple Watchos 5.0 Apple Watchos 5.0.1 Apple Watchos 5.1 Apple Watchos 5.1.1 Apple Watchos 5.1.2 Apple Watchos 5.1.3 Apple Watchos 5.2 Apple Watchos 5.2.1 Apple Watchos 5.3 Apple Watchos 5.3.4 Apple Watchos 5.3.7 Apple Watchos 5.3.9 Apple Watchos 6.0 Apple Watchos 6.0.0 Apple Watchos 6.0.1 Apple Watchos 6.1 Apple Watchos 6.1.1 Apple Watchos 6.1.2 Apple Watchos 6.1.3 Apple Watchos 6.2 Apple Watchos 6.2.5 Apple Watchos 6.2.6 Apple Watchos 6.2.8 Apple Watchos 6.2.9 Apple Tvos - Apple Tvos 1.0.0 Apple Tvos 1.1.0 Apple Tvos 2.0.0 Apple Tvos 2.0.1 Apple Tvos 2.0.2 Apple Tvos 2.1.0 Apple Tvos 2.2.0 Apple Tvos 2.3.0 Apple Tvos 2.3.1 Apple Tvos 2.4.0 Apple Tvos 3.0.0 Apple Tvos 3.0.1 Apple Tvos 3.0.2 Apple Tvos 4.1.0 Apple Tvos 4.1.1 Apple Tvos 4.2.0 Apple Tvos 4.2.1 Apple Tvos 4.2.2 Apple Tvos 4.3.0 Apple Tvos 4.4.0 Apple Tvos 4.4.2 Apple Tvos 4.4.3 Apple Tvos 4.4.4 Apple Tvos 5.0.0 Apple Tvos 5.0.1 Apple Tvos 5.0.2 Apple Tvos 5.1.0 Apple Tvos 5.1.1 Apple Tvos 5.2.0 Apple Tvos 6.0 Apple Tvos 6.0.1 Apple Tvos 6.0.2 Apple Tvos 6.1 Apple Tvos 6.1.1 Apple Tvos 6.1.2 Apple Tvos 6.2 Apple Tvos 6.2.1 Apple Tvos 7.0 Apple Tvos 7.0.1 Apple Tvos 7.0.2 Apple Tvos 7.0.3 Apple Tvos 7.1 Apple Tvos 9.0 Apple Tvos 9.0.1 Apple Tvos 9.1 Apple Tvos 9.1.1 Apple Tvos 9.2 Apple Tvos 9.2.1 Apple Tvos 9.2.2 Apple Tvos 10.0 Apple Tvos 10.0.1 Apple Tvos 10.1 Apple Tvos 10.1.1 Apple Tvos 10.2 Apple Tvos 10.2.1 Apple Tvos 10.2.2 Apple Tvos 10.3 Apple Tvos 11 Apple Tvos 11.0 Apple Tvos 11.1 Apple Tvos 11.2 Apple Tvos 11.2.1 Apple Tvos 11.2.6 Apple Tvos 11.3 Apple Tvos 11.4.1 Apple Tvos 12 Apple Tvos 12.0 Apple Tvos 12.0.1 Apple Tvos 12.1 Apple Tvos 12.1.1 Apple Tvos 12.1.2 Apple Tvos 12.2 Apple Tvos 12.3 Apple Tvos 12.4 Apple Tvos 13 Apple Tvos 13.0 Apple Tvos 13.2 Apple Tvos 13.3 Apple Tvos 13.3.1 Apple Tvos 13.4 Apple Tvos 13.4.5 Apple Tvos 13.4.6 Apple Tvos 13.4.8 Apple Ipados - Apple Ipados 12.1 Apple Ipados 12.1.1 Apple Ipados 12.1.3 Apple Ipados 12.2 Apple Ipados 12.3 Apple Ipados 12.4 Apple Ipados 13.1 Apple Ipados 13.1.1 Apple Ipados 13.1.2 Apple Ipados 13.1.3 Apple Ipados 13.2 Apple Ipados 13.2.2 Apple Ipados 13.2.3 Apple Ipados 13.3 Apple Ipados 13.3.1 Apple Ipados 13.4 Apple Ipados 13.5 Apple Ipados 13.5.1 Apple Ipados 13.6 Apple Macos 11.0	369

Common Weakness Enumeration (CWE)

CWE-190 - Integer Overflow or Wraparound

Common Attack Pattern Enumeration and Classification (CAPEC)

Forced Integer Overflow
This attack forces an integer variable to go out of range. The integer variable is often used as an offset such as size of memory allocation or similarly. The attacker would typically control the value of such variable and try to get it out of range. For instance the integer in question is incremented past the maximum possible value, it may wrap to become a very small, or negative number, therefore providing a very incorrect value which can lead to unexpected behavior. At worst the attacker can execute arbitrary code.

Nessus

NASL family	Debian Local Security Checks
NASL id	DEBIAN_DLA-2221.NASL
description	An integer overflow vulnerability was found in the sqlite3_str_vappendf function of the src/printf.c file of sqlite3 from version 3.8.3. For Debian 8
last seen	2020-06-06
modified	2020-05-27
plugin id	136893
published	2020-05-27
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/136893
title	Debian DLA-2221-1 : sqlite3
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Debian Security Advisory DLA-2221-1. The text # itself is copyright (C) Software in the Public Interest, Inc. # include("compat.inc"); if (description) { script_id(136893); script_version("1.2"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/05"); script_cve_id("CVE-2020-13434"); script_name(english:"Debian DLA-2221-1 : sqlite3"); script_summary(english:"Checks dpkg output for the updated packages."); script_set_attribute( attribute:"synopsis", value:"The remote Debian host is missing a security update." ); script_set_attribute( attribute:"description", value: "An integer overflow vulnerability was found in the sqlite3_str_vappendf function of the src/printf.c file of sqlite3 from version 3.8.3. For Debian 8 'Jessie', this problem has been fixed in version 3.8.7.1-1+deb8u6. We recommend that you upgrade your sqlite3 packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://lists.debian.org/debian-lts-announce/2020/05/msg00024.html" ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/jessie/sqlite3" ); script_set_attribute(attribute:"solution", value:"Upgrade the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lemon"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libsqlite3-0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libsqlite3-0-dbg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libsqlite3-dev"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:libsqlite3-tcl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:sqlite3"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:sqlite3-doc"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:8.0"); script_set_attribute(attribute:"vuln_publication_date", value:"2020/05/24"); script_set_attribute(attribute:"patch_publication_date", value:"2020/05/26"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/05/27"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Debian Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("debian_package.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian"); if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (deb_check(release:"8.0", prefix:"lemon", reference:"3.8.7.1-1+deb8u6")) flag++; if (deb_check(release:"8.0", prefix:"libsqlite3-0", reference:"3.8.7.1-1+deb8u6")) flag++; if (deb_check(release:"8.0", prefix:"libsqlite3-0-dbg", reference:"3.8.7.1-1+deb8u6")) flag++; if (deb_check(release:"8.0", prefix:"libsqlite3-dev", reference:"3.8.7.1-1+deb8u6")) flag++; if (deb_check(release:"8.0", prefix:"libsqlite3-tcl", reference:"3.8.7.1-1+deb8u6")) flag++; if (deb_check(release:"8.0", prefix:"sqlite3", reference:"3.8.7.1-1+deb8u6")) flag++; if (deb_check(release:"8.0", prefix:"sqlite3-doc", reference:"3.8.7.1-1+deb8u6")) flag++; if (flag) { if (report_verbosity > 0) security_warning(port:0, extra:deb_report_get()); else security_warning(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2020-0477F8840E.NASL
description	Rebase to version 3.32.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-10
modified	2020-06-04
plugin id	137102
published	2020-06-04
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/137102
title	Fedora 32 : sqlite (2020-0477f8840e)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Fedora Security Advisory FEDORA-2020-0477f8840e. # include("compat.inc"); if (description) { script_id(137102); script_version("1.2"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/09"); script_cve_id("CVE-2020-13434", "CVE-2020-13435", "CVE-2020-13630", "CVE-2020-13631", "CVE-2020-13632"); script_xref(name:"FEDORA", value:"2020-0477f8840e"); script_name(english:"Fedora 32 : sqlite (2020-0477f8840e)"); script_summary(english:"Checks rpm output for the updated package."); script_set_attribute( attribute:"synopsis", value:"The remote Fedora host is missing a security update." ); script_set_attribute( attribute:"description", value: "Rebase to version 3.32.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://bodhi.fedoraproject.org/updates/FEDORA-2020-0477f8840e" ); script_set_attribute( attribute:"solution", value:"Update the affected sqlite package." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:sqlite"); script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:32"); script_set_attribute(attribute:"vuln_publication_date", value:"2020/05/24"); script_set_attribute(attribute:"patch_publication_date", value:"2020/06/02"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/06/04"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Fedora Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) \|\| "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora"); os_ver = pregmatch(pattern: "Fedora.*release ([0-9]+)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora"); os_ver = os_ver[1]; if (! preg(pattern:"^32([^0-9]\|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 32", "Fedora " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu); flag = 0; if (rpm_check(release:"FC32", reference:"sqlite-3.32.1-1.fc32")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "sqlite"); }

NASL family	Ubuntu Local Security Checks
NASL id	UBUNTU_USN-4394-1.NASL
description	It was discovered that SQLite incorrectly handled certain corruped schemas. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-8740) It was discovered that SQLite incorrectly handled certain SELECT statements. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10. (CVE-2019-19603) It was discovered that SQLite incorrectly handled certain self-referential views. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10. (CVE-2019-19645) Henry Liu discovered that SQLite incorrectly handled certain malformed window-function queries. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-11655) It was discovered that SQLite incorrectly handled certain string operations. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-13434) It was discovered that SQLite incorrectly handled certain expressions. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-13435) It was discovered that SQLite incorrectly handled certain fts3 queries. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-13630) It was discovered that SQLite incorrectly handled certain virtual table names. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-13631) It was discovered that SQLite incorrectly handled certain fts3 queries. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-13632). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-12
modified	2020-06-11
plugin id	137353
published	2020-06-11
reporter	Ubuntu Security Notice (C) 2020 Canonical, Inc. / NASL script (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/137353
title	Ubuntu 16.04 LTS / 18.04 LTS / 19.10 / 20.04 : sqlite3 vulnerabilities (USN-4394-1)

NASL family	PhotonOS Local Security Checks
NASL id	PHOTONOS_PHSA-2020-1_0-0298_SQLITE.NASL
description	An update of the sqlite package has been released.
last seen	2020-06-12
modified	2020-06-10
plugin id	137322
published	2020-06-10
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/137322
title	Photon OS 1.0: Sqlite PHSA-2020-1.0-0298

NASL family	PhotonOS Local Security Checks
NASL id	PHOTONOS_PHSA-2020-2_0-0249_SQLITE.NASL
description	An update of the sqlite package has been released.
last seen	2020-06-12
modified	2020-06-06
plugin id	137193
published	2020-06-06
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/137193
title	Photon OS 2.0: Sqlite PHSA-2020-2.0-0249

NASL family	PhotonOS Local Security Checks
NASL id	PHOTONOS_PHSA-2020-3_0-0101_SQLITE.NASL
description	An update of the sqlite package has been released.
last seen	2020-06-12
modified	2020-06-06
plugin id	137188
published	2020-06-06
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/137188
title	Photon OS 3.0: Sqlite PHSA-2020-3.0-0101

References

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.