CVE:CVE-2020-13434
CNNVD:CNNVD-202005-1159
Sqlite是一款轻型的数据库，是遵守ACID的关系型数据库管理系统。
SQLite 中的printf.c文件的sqlite3_str_vappendf存在输入验证错误漏洞。远程攻击者可通过发送特制的请求利用该漏洞执行任意代码。
solution:Upgrade sqlite sqlite to a higher version than 3.32.0,and avoid the version (,3.32.0]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade fedoraproject fedora to a higher version than 32,and avoid the version 32; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.10,20.04,and avoid the version 16.04,18.04,19.10,20.04; Upgrade freebsd freebsd to a higher version than 11.4,11.4,11.4:p1,12.0,12.0:p1,12.0:p10,12.0:p11,12.0:p12,12.0:p2,12.0:p3,12.0:p4,12.0:p5,12.0:p6,12.0:p7,12.0:p8,12.0:p9,12.1,12.1:p1,12.1:p2,12.1:p3,12.1:p4,12.1:p5,12.1:p6,12.1:p7,and avoid the version [11.0,11.4),11.4,11.4:p1,12.0,12.0:p1,12.0:p10,12.0:p11,12.0:p12,12.0:p2,12.0:p3,12.0:p4,12.0:p5,12.0:p6,12.0:p7,12.0:p8,12.0:p9,12.1,12.1:p1,12.1:p2,12.1:p3,12.1:p4,12.1:p5,12.1:p6,12.1:p7; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_network_charging_and_control to a higher version than 12.0.3,6.0.1,and avoid the version [12.0.0,12.0.3],6.0.1; Upgrade oracle outside_in_technology to a higher version than 8.5.5,and avoid the version 8.5.5; Upgrade apple icloud to a higher version than 11.5,and avoid the version (,11.5); Upgrade apple itunes to a higher version than 12.10.9,and avoid the version (,12.10.9); Upgrade apple ipados to a higher version than 14.0,and avoid the version (,14.0); Upgrade apple iphone_os to a higher version than 14.0,and avoid the version (,14.0); Upgrade apple macos to a higher version than 11.0.1,and avoid the version [11.0,11.0.1); Upgrade apple tvos to a higher version than 14.0,and avoid the version (,14.0); Upgrade apple watchos to a higher version than 7.0,and avoid the version (,7.0)