PT-2020-6897
CVE-2020-13435
·
Published
2020-05-23
·
Updated
2026-10-14
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
SQLite versions prior to 3.32.0
Description
The issue is related to a null pointer dereference in the sqlite3ExprCodeTarget function of the SQLite database management system. This can be exploited to cause a denial of service. A remote attacker may be able to trigger this issue, leading to a service disruption.
Recommendations
For versions prior to 3.32.0, update to a version that includes improved checks to address this issue.
At the moment, there is no information about other specific mitigation measures for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾