Log in Start free

Vulnerability · Published May 27, 2020 · Assigned by mitre

CVE-2020-13632

Medium 5.5

In plain English

A medium-severity security flaw in the mingw-binutils-generic package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.6%top 51.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8mingw-binutils-generic2.30-3.el8ALSA-2021:1968
AlmaLinux:8mingw-filesystem-base104-2.el8ALSA-2021:1968
AlmaLinux:8mingw32-binutils2.30-3.el8ALSA-2021:1968
AlmaLinux:8mingw32-bzip21.0.6-14.el8ALSA-2021:1968
AlmaLinux:8mingw32-bzip2-static1.0.6-14.el8ALSA-2021:1968
AlmaLinux:8mingw32-filesystem104-2.el8ALSA-2021:1968
AlmaLinux:8mingw32-sqlite3.26.0.0-1.el8ALSA-2021:1968
AlmaLinux:8mingw32-sqlite-static3.26.0.0-1.el8ALSA-2021:1968
AlmaLinux:8mingw64-binutils2.30-3.el8ALSA-2021:1968
AlmaLinux:8mingw64-bzip21.0.6-14.el8ALSA-2021:1968
AlmaLinux:8mingw64-bzip2-static1.0.6-14.el8ALSA-2021:1968
AlmaLinux:8mingw64-filesystem104-2.el8ALSA-2021:1968
AlmaLinux:8mingw64-sqlite3.26.0.0-1.el8ALSA-2021:1968
AlmaLinux:8mingw64-sqlite-static3.26.0.0-1.el8ALSA-2021:1968
Debian:12sqlite33.32.0-1DEBIAN-CVE-2020-13632
Debian:13sqlite33.32.0-1DEBIAN-CVE-2020-13632
Debian:14sqlite33.32.0-1DEBIAN-CVE-2020-13632
Rocky Linux:8mingw-binutils0:2.30-3.el8RLSA-2021:1968
Rocky Linux:8mingw-bzip20:1.0.6-14.el8RLSA-2021:1968
Rocky Linux:8mingw-sqlite0:3.26.0.0-1.el8RLSA-2021:1968

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References