CVE Vulnerabilities

CVE-2020-35525

NULL Pointer Dereference

Published: Sep 01, 2022 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

NameVendorStart VersionEnd Version
SqliteSqlite3.31.1 (including)3.31.1 (including)
Red Hat Enterprise Linux 8RedHatsqlite-0:3.26.0-16.el8_6*
Red Hat Enterprise Linux 8RedHatsqlite-0:3.26.0-16.el8_6*
SqliteUbuntubionic*
SqliteUbuntukinetic*
SqliteUbuntutrusty*
SqliteUbuntuupstream*
SqliteUbuntuxenial*
Sqlite3Ubuntubionic*
Sqlite3Ubuntuesm-infra-legacy/trusty*
Sqlite3Ubuntuesm-infra/bionic*
Sqlite3Ubuntuesm-infra/focal*
Sqlite3Ubuntuesm-infra/xenial*
Sqlite3Ubuntufocal*
Sqlite3Ubuntutrusty*
Sqlite3Ubuntutrusty/esm*
Sqlite3Ubuntuupstream*
Sqlite3Ubuntuxenial*

Potential Mitigations

References