Your submission was sent successfully! Close

CVE-2020-35525

Published: 1 September 2022

In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.

Priority

Medium

CVSS 3 base score: 7.5

Status

Package Release Status
sqlite
Launchpad, Ubuntu, Debian
bionic Needs triage

focal Needs triage

jammy Needs triage

trusty Needs triage

upstream Needs triage

xenial Ignored
(end of standard support)
sqlite3
Launchpad, Ubuntu, Debian
bionic
Released (3.22.0-1ubuntu0.6)
focal
Released (3.31.1-4ubuntu0.4)
jammy Not vulnerable
(3.37.2-2)
trusty Needs triage

upstream Needs triage

xenial
Released (3.11.0-1ubuntu1.5+esm1)
Patches:
upstream: https://www.sqlite.org/src/info/a67cf5b7d37d5b14
upstream: https://github.com/sqlite/sqlite/commit/5f69512404cd2e5153ddf90ea277fbba6dd58ab7 (version-3.32.0)