This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-13632 →

DEBIAN-CVE-2020-13632

ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 sqlite3

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.0-1"}]}]

Debian:13 sqlite3

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.0-1"}]}]

Debian:14 sqlite3

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.32.0-1"}]}]