Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-35527HistorySep 01, 2022 - 6:15 p.m.
CVE-2020-35527
2022-09-0118:15:08
Debian Security Bug Tracker
security-tracker.debian.org
19
sqlite 3.31.1
out of bounds access
alter table
nested from clause
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.5%
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | sqlite3 | <Â 3.32.0-1 | sqlite3_3.32.0-1_all.deb |
| Debian | 11 | all | sqlite3 | <Â 3.32.0-1 | sqlite3_3.32.0-1_all.deb |
| Debian | 999 | all | sqlite3 | <Â 3.32.0-1 | sqlite3_3.32.0-1_all.deb |
| Debian | 13 | all | sqlite3 | <Â 3.32.0-1 | sqlite3_3.32.0-1_all.deb |
Related
cvelist
cvelist
CVE-2020-35527
2022-09-01 00:00:00
veracode
veracode
Out Of Bound Access
2022-09-16 17:53:04
osv
osv
BIT-sqlite-2020-35527
2024-03-06 11:07:04
sqlite3 - security update
2022-09-13 00:00:00
Moderate: sqlite security update
2022-10-25 07:23:23
ubuntucve
ubuntucve
CVE-2020-35527
2022-09-01 00:00:00
prion
prion
Design/Logic Flaw
2022-09-01 18:15:00
redhatcve
redhatcve
CVE-2020-35527
2022-08-29 19:42:54
nvd
nvd
CVE-2020-35527
2022-09-01 18:15:08
ibm
ibm
cve
cve
CVE-2020-35527
2022-09-01 18:15:08
cnvd
cnvd
SQLite has an unspecified vulnerability (CNVD-2022-62228)
2022-09-05 00:00:00
openvas
openvas
SQLite < 3.32.0 Multiple Vulnerabilities
2023-01-10 00:00:00
Debian: Security Advisory (DLA-3107-1)
2022-09-14 00:00:00
Ubuntu: Security Advisory (USN-5615-3)
2024-06-28 00:00:00
nessus
nessus
RHEL 8 : sqlite (RHSA-2022:7108)
2022-10-25 00:00:00
Oracle Linux 8 : sqlite (ELSA-2022-7108)
2022-10-26 00:00:00
AlmaLinux 8 : sqlite (ALSA-2022:7108)
2022-10-28 00:00:00
almalinux
almalinux
Moderate: sqlite security update
2022-10-25 00:00:00
rocky
rocky
sqlite security update
2022-10-25 07:23:23
redhat
redhat
(RHSA-2022:7108) Moderate: sqlite security update
2022-10-25 07:23:23
(RHSA-2022:7407) Moderate: Service Binding Operator 1.3.1 security update
2022-11-03 13:07:58
oraclelinux
oraclelinux
sqlite security update
2022-10-26 00:00:00
ubuntu
ubuntu
SQLite vulnerabilities
2022-09-15 00:00:00
SQLite vulnerability
2024-06-27 00:00:00
debian
debian
[SECURITY] [DLA 3107-1] sqlite3 security update
2022-09-13 14:25:21
rosalinux
rosalinux
Advisory ROSA-SA-2023-2171
2023-06-20 10:39:04
Advisory ROSA-SA-2023-2149
2023-04-11 13:56:14
cloudfoundry
cloudfoundry
USN-5615-1: SQLite vulnerabilities | Cloud Foundry
2022-09-29 00:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.5%
Related for DEBIANCVE:CVE-2020-35527