PT-2020-6895

CVE-2020-13434

·

Published

2020-05-23

·

Updated

2026-10-14

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions SQLite versions prior to 3.32.0
Description The issue is related to an integer overflow in the sqlite3 str vappendf function in printf.c, which can be exploited to cause a denial of service.
Recommendations For versions prior to 3.32.0, update to a version that includes improved checks to address the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2021:1968
ALT-PU-2020-2017
ALT-PU-2020-2898
AZL-38614
BIT-SQLITE-2020-13434
CESA-2021_1581
CESA-2021_1968
CLEANSTART-2026-SF72367
DLA-2221-1
DLA-2340-1
MGASA-2021-0303
OPENSUSE-SU-2021:1058-1
OPENSUSE-SU-2021_1058-1
OPENSUSE-SU-2021:2320-1
OPENSUSE-SU-2021_2320-1
OPENSUSE-SU-2024:11400-1
RHSA-2021:1581
RHSA-2021_1581
RHSA-2021:1968
RHSA-2021_1968
RLSA-2021:1581
SUSE-SU-2021:2320-1
SUSE-SU-2021:3215-1
USN-4394-1
Found an issue in the description? Have something to add? Feel free to write us 👾