Medium · published May 27, 2020
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
| Product | Versions | Fixed in |
|---|---|---|
| sqlite/sqlite | < 3.32.0 | 3.32.0 |
| fedoraproject/fedora | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| netapp/cloud_backup | all versions | — |
| netapp/solidfire\,_enterprise_sds_\&_hci_storage_node | all versions | — |
| broadcom/fabric_operating_system | all versions | — |
| netapp/hci_compute_node_firmware | all versions | — |
| debian/debian_linux | all versions | — |
| siemens/sinec_infrastructure_network_services | < 1.0.1.1 | 1.0.1.1 |
| oracle/communications_network_charging_and_control | ≥ 12.0.0, ≤ 12.0.3 | — |
| oracle/communications_network_charging_and_control | all versions | — |
| oracle/outside_in_technology | all versions | — |
| oracle/outside_in_technology | all versions | — |
| oracle/zfs_storage_appliance_kit | all versions | — |