{"schema_version":"1.8.0","id":"CVE-2020-9327","published":"2020-02-21T22:15:10.803Z","modified":"2026-08-07T11:31:11.790522483Z","aliases":["BIT-sqlite-2020-9327"],"related":["SUSE-SU-2021:2320-1","SUSE-SU-2021:3215-1","openSUSE-SU-2021:1058-1","openSUSE-SU-2021:2320-1"],"details":"In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sqlite/sqlite","events":[{"introduced":"562fd18b9dc27216191c0a6477bba9b175f7f0d2"},{"last_affected":"562fd18b9dc27216191c0a6477bba9b175f7f0d2"}],"database_specific":{"cpe":"cpe:2.3:a:sqlite:sqlite:3.31.1:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.31.1"},{"last_affected":"3.31.1"}],"source":"CPE_STRING"}}],"versions":["3.31.1","version-3.31.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-9327.json"}}],"references":[{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202003-16"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20200313-0002/"},{"type":"ADVISORY","url":"https://www.sqlite.org/cgi/src/info/4374860b29383380"},{"type":"FIX","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf"},{"type":"FIX","url":"https://usn.ubuntu.com/4298-1/"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpujan2021.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpujul2020.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpuoct2020.html"},{"type":"FIX","url":"https://www.sqlite.org/cgi/src/info/9d0d4ab95dc0c56e"},{"type":"FIX","url":"https://www.sqlite.org/cgi/src/info/abc473fb8fb99900"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.0.0"},{"last_affected":"12.0.3"}],"source":"CPE_RANGE","vendor_product":"oracle:communications_network_charging_and_control"},{"cpes":["cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"8.0.22"}],"source":"CPE_RANGE","vendor_product":"oracle:mysql_workbench"},{"cpes":["cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"1.0.1.1"}],"source":"CPE_RANGE","vendor_product":"siemens:sinec_infrastructure_network_services"},{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"18.04"},{"last_affected":"18.04"},{"introduced":"19.10"},{"last_affected":"19.10"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux"},{"cpes":["cpe:2.3:o:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.1"},{"last_affected":"8.1"}],"source":"CPE_STRING","vendor_product":"oracle:communications_messaging_server"},{"cpes":["cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.2:*:*:*:*:*:*:*","cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0.1"},{"last_affected":"6.0.1"},{"introduced":"12.0.2"},{"last_affected":"12.0.2"}],"source":"CPE_STRING","vendor_product":"oracle:communications_network_charging_and_control"},{"cpes":["cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"12.4.0.0"},{"last_affected":"12.4.0.0"}],"source":"CPE_STRING","vendor_product":"oracle:enterprise_manager_ops_center"},{"cpes":["cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.1.2.4"},{"last_affected":"11.1.2.4"}],"source":"CPE_STRING","vendor_product":"oracle:hyperion_infrastructure_technology"},{"cpes":["cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*","cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.5.4"},{"last_affected":"8.5.4"},{"introduced":"8.5.5"},{"last_affected":"8.5.5"}],"source":"CPE_STRING","vendor_product":"oracle:outside_in_technology"},{"cpes":["cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.8"},{"last_affected":"8.8"}],"source":"CPE_STRING","vendor_product":"oracle:zfs_storage_appliance_kit"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}