2 lines
7.1 KiB
JSON
2 lines
7.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"sqlite","vendor":"n/a","versions":[{"status":"affected","version":"sqlite 3.34.1"}]}],"source":"secalert@redhat.com"},{"affectedData":[{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]}],"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*","matchCriteriaId":"4323F972-6CFE-4E59-A82B-FB5621827BE3","versionEndExcluding":"3.34.1","versionStartIncluding":"3.33.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*","matchCriteriaId":"F28B94B3-D940-4B1C-9E72-F061515D24F2","versionEndIncluding":"12.0.4.0.0","versionStartIncluding":"12.0.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"ECC00750-1DBF-401F-886E-E0E65A277409","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:13.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5C376719-16BB-4485-AE6F-D66FC0A017F4","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*","matchCriteriaId":"86305E47-33E9-411C-B932-08C395C09982","versionEndExcluding":"9.2.6.0","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*","matchCriteriaId":"EED6C8C2-F986-4CFD-A343-AD2340F850F2","versionEndIncluding":"8.0.26","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*","matchCriteriaId":"3198F822-43F8-4CB3-97F7-C2982FDA5CBD","vulnerable":true},{"criteria":"cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*","matchCriteriaId":"D3E503FB-6279-4D4A-91D8-E237ECF9D2B0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability."},{"lang":"es","value":"Se encontró un fallo en la funcionalidad de consulta SELECT de SQLite (src/select.c). Este fallo permite a un atacante que es capaz de ejecutar consultas SQL localmente en la base de datos SQLite causar una denegación de servicio o una posible ejecución de código desencadenando un uso de la memoria previamente liberada. La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"}],"id":"CVE-2021-20227","lastModified":"2026-10-14T11:16:51.263","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2021-03-23T17:15:13.747","references":[{"source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924886"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202103-04"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202210-40"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20210423-0010/"},{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"source":"secalert@redhat.com","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"source":"secalert@redhat.com","tags":["Release Notes","Vendor Advisory"],"url":"https://www.sqlite.org/releaselog/3_34_1.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924886"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202103-04"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202210-40"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20210423-0010/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com//security-alerts/cpujul2021.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuApr2021.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2021.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes","Vendor Advisory"],"url":"https://www.sqlite.org/releaselog/3_34_1.html"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"secalert@redhat.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-416"}],"source":"nvd@nist.gov","type":"Secondary"}]}
|