NetSight
IP …
high7.5

CVE-2020-13871

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

Impact

SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.

Affected products

VendorProductAffected versions
SqliteSqlite
Version 3.32.2
FedoraprojectFedora
Version 33
DebianDebian Linux
Version 9.0
OracleCommunications Messaging Server
Version 8.1
OracleCommunications Network Charging And Control
Versions 6.0.1, 12.0.2
OracleEnterprise Manager Ops Center
Version 12.4.0.0
OracleHyperion Infrastructure Technology
Version 11.1.2.4
OracleMysql Workbench
through 8.0.22
OracleZfs Storage Appliance Kit
Version 8.8
SiemensSinec Infrastructure Network Services
before 1.0.1.1
NetappCloud Backup
All versions
NetappOntap Select Deploy Administration Utility
All versions

Weakness classification

CWE-416

References