CVE:CVE-2020-15358
CNNVD:CNNVD-202006-1768
Sqlite是一款轻型的数据库，是遵守ACID的关系型数据库管理系统。
SQLite 3.32.3之前版本中的multiSelectOrderBy存在缓冲区错误漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
solution:Upgrade sqlite sqlite to a higher version than 3.32.3,and avoid the version (,3.32.3); Upgrade canonical ubuntu_linux to a higher version than 20.04,and avoid the version 20.04; Upgrade apple icloud to a higher version than 7.21,and avoid the version (,7.21); Upgrade apple ipados to a higher version than 14.0,and avoid the version (,14.0); Upgrade apple iphone_os to a higher version than 14.0,and avoid the version (,14.0); Upgrade apple macos to a higher version than 11.0.1,and avoid the version (,11.0.1); Upgrade apple tvos to a higher version than 14.0,and avoid the version (,14.0); Upgrade apple watchos to a higher version than 7.0,and avoid the version (,7.0); Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_messaging_server to a higher version than 8.1,and avoid the version 8.1; Upgrade oracle communications_network_charging_and_control to a higher version than 6.0.1,12.0.2,and avoid the version 6.0.1,12.0.2; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle hyperion_infrastructure_technology to a higher version than 11.1.2.4,and avoid the version 11.1.2.4; Upgrade oracle mysql to a higher version than 8.0.22,and avoid the version (,8.0.22]; Upgrade oracle outside_in_technology to a higher version than 8.5.4,8.5.5,and avoid the version 8.5.4,8.5.5; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1)