CVE-2020-15358

MEDIUM

SQLite < 3.32.3 - Out-of-bounds Write via Query-Flattener Optimization

Title source: llm
STIX 2.1

Description

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

References (22)

Core 22
Core References
Exploit, Vendor Advisory x_refsource_misc
https://www.sqlite.org/src/tktview?name=8f157e8010
Patch, Vendor Advisory x_refsource_misc
https://www.sqlite.org/src/info/10fa79d00f8091e5
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202007-26
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/4438-1/
Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuoct2020.html
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20200709-0001/
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Nov/19
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Nov/20
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Nov/22
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Dec/32
Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpujan2021.html
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT211843
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT211850
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT211844
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT211847
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT211931
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2021/Feb/14
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuApr2021.html
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT212147
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuapr2022.html
Third Party Advisory x_refsource_confirm
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

Scores

CVSS v3 5.5
EPSS 0.0008
EPSS Percentile 22.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-787
Status published
Products (18)
apple/icloud < 7.21
apple/ipados < 14.0
apple/iphone_os < 14.0
apple/macos < 11.0.1
apple/tvos < 14.0
apple/watchos < 7.0
canonical/ubuntu_linux 20.04
oracle/communications_cloud_native_core_policy 1.14.0
oracle/communications_messaging_server 8.1
oracle/communications_network_charging_and_control 6.0.1
... and 8 more
Published Jun 27, 2020
Tracked Since Feb 18, 2026