CVE-2021-20227

Katalog CVE

CVSS 5.5 · Medium EPSS 0,50%

Kerentanan Use After Free pada sqlite, oracle communications network charging and control +5 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability.

Rincian

Terbit di NVD

23 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,50% peluang dieksploitasi; lebih tinggi dari 40,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.sqlite.org/releaselog/3_34_1.html release notes · advisory vendor
• https://www.oracle.com//security-alerts/cpujul2021.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuApr2021.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuoct2021.html patch · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=1924886 issue tracking · advisory pihak ketiga
• https://security.gentoo.org/glsa/202103-04 advisory pihak ketiga
• https://security.gentoo.org/glsa/202210-40 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210423-0010/ advisory pihak ketiga