What’s Vulnerable › Vulnerabilities
CVE-2020-13871
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 4.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-06-06 · updated 2026-10-14
- Weakness: CWE-416
Description
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
Affected products
- Debian Linux: 9.0
- Fedoraproject Fedora: 33
- NetApp Cloud Backup: all versions
- NetApp ONTAP Select Deploy administration utility: all versions
- Oracle Communications Messaging Server: 8.1
- Oracle Communications Network Charging And Control: 6.0.1, 12.0.2
- Oracle Corporation Enterprise Manager Ops Center: 12.4.0.0
- Oracle Corporation Oracle Hyperion Infrastructure Technology: 11.1.2.4
- Oracle Corporation MySQL Workbench: through 8.0.22
- Oracle Corporation Oracle ZFS Storage Appliance Kit: 8.8
- Siemens Sinec Infrastructure Network Services: before 1.0.1.1 — fixed in 1.0.1.1
- SQLite: 3.32.2
How to fix
Upgrade to a fixed version: Siemens Sinec Infrastructure Network Services 1.0.1.1. Check the vendor advisory for mitigations.
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BN32AGQPMHZRNM6P6L5GZPETOWTGXOKP/
- https://security.gentoo.org/glsa/202007-26
- https://security.netapp.com/advisory/ntap-20200619-0002/
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.sqlite.org/src/info/79eff1d0383179c4
- https://www.sqlite.org/src/info/c8d3b9f0a750a529
- https://www.sqlite.org/src/info/cd708fa84d2aaaea
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html
Get alerted when CVE-2020-13871 or the next vulnerability affects your stack