kritisch
CVE-2020-35527
sqlite: Out of bounds access during table rename
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitnami9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Bitnami. Niedriger laut Red Hat (mittel), AlmaLinux (mittel), Oracle (mittel), Rocky Linux (mittel), Ubuntu (mittel).
Beschreibung
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | sqlite | 3.31.2 |
| alma 8 | lemon, sqlite, sqlite-devel und 2 weitere | 3.26.0-16.el8_6 |
| debian 10 | sqlite3 | 3.27.2-3+deb10u2 |
| debian 11 | sqlite3 | 3.32.0-1 |
| debian 12 | sqlite3 | 3.32.0-1 |
| debian 13 | sqlite3 | 3.32.0-1 |
| debian 14 | sqlite3 | 3.32.0-1 |
| echo | sqlite3 | 3.32.0-1 |
| Oracle Linux 8 | lemon, sqlite, sqlite-devel und 2 weitere | 3.26.0-16.el8_6 |
| Red Hat | lemon, sqlite, sqlite-devel und 2 weitere | kein Fix angegeben |
| rocky 8 | lemon, sqlite, sqlite-devel und 2 weitere | 3.26.0-16.el8_6 |
| root.io debian 11 | rootio-sqlite3 | 3.32.0-1 |
Alle 38 Einträge aus 19 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | sqlite | 3.31.2 |
| alma 8 | lemon | 3.26.0-16.el8_6 |
| alma 8 | sqlite | 3.26.0-16.el8_6 |
| alma 8 | sqlite-devel | 3.26.0-16.el8_6 |
| alma 8 | sqlite-doc | 3.26.0-16.el8_6 |
| alma 8 | sqlite-libs | 3.26.0-16.el8_6 |
| debian 10 | sqlite3 | 3.27.2-3+deb10u2 |
| debian 11 | sqlite3 | 3.32.0-1 |
| debian 12 | sqlite3 | 3.32.0-1 |
| debian 13 | sqlite3 | 3.32.0-1 |
| debian 14 | sqlite3 | 3.32.0-1 |
| echo | sqlite3 | 3.32.0-1 |
| Oracle Linux 8 | lemon | 3.26.0-16.el8_6 |
| Oracle Linux 8 | sqlite | 3.26.0-16.el8_6 |
| Oracle Linux 8 | sqlite-devel | 3.26.0-16.el8_6 |
| Oracle Linux 8 | sqlite-doc | 3.26.0-16.el8_6 |
| Oracle Linux 8 | sqlite-libs | 3.26.0-16.el8_6 |
| Red Hat | lemon | kein Fix angegeben |
| Red Hat | sqlite | kein Fix angegeben |
| Red Hat | sqlite-devel | kein Fix angegeben |
| Red Hat | sqlite-doc | kein Fix angegeben |
| Red Hat | sqlite-tcl | kein Fix angegeben |
| rocky 8 | lemon | 3.26.0-16.el8_6 |
| rocky 8 | sqlite | 3.26.0-16.el8_6 |
| rocky 8 | sqlite-devel | 3.26.0-16.el8_6 |
| rocky 8 | sqlite-doc | 3.26.0-16.el8_6 |
| rocky 8 | sqlite-libs | 3.26.0-16.el8_6 |
| root.io debian 11 | rootio-sqlite3 | 3.32.0-1 |
| root.io debian 12 | rootio-sqlite3 | 3.32.0-1 |
| root.io debian 13 | rootio-sqlite3 | 3.32.0-1 |
| seal Red Hat 7 | seal-sqlite | 3.7.17-8.el7_7.1+sp999 |
| seal Red Hat 7 | sqlite | 3.7.17-8.el7_7.1+sp999 |
| seal Red Hat 8 | seal-sqlite | 3.26.0-19.el8_9+sp999 |
| seal Red Hat 8 | sqlite | 3.26.0-19.el8_9+sp999 |
| seal Red Hat 9 | seal-sqlite | 3.34.1-7.el9_3+sp999 |
| seal Red Hat 9 | sqlite | 3.34.1-7.el9_3+sp999 |
| ubuntu 20.04 | sqlite3 | 3.31.1-4ubuntu0.4 |
| ubuntu 20.04-ESM | sqlite3 | 3.31.1-4ubuntu0.4 |
Referenzen
- https://access.redhat.com/errata/RHSA-2022:7108
- https://access.redhat.com/security/cve/CVE-2020-35527
- https://bugzilla.redhat.com/2122324
- https://bugzilla.redhat.com/2122329
- https://bugzilla.redhat.com/show_bug.cgi?id=2122324
- https://bugzilla.redhat.com/show_bug.cgi?id=2122329
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35525
Alle 18 Referenzen
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35527
- https://errata.almalinux.org/8/ALSA-2022-7108.html
- https://errata.rockylinux.org/RLSA-2022:7108
- https://linux.oracle.com/cve/CVE-2020-35527.html
- https://linux.oracle.com/errata/ELSA-2022-7108.html
- https://nvd.nist.gov/vuln/detail/CVE-2020-35527
- https://security.netapp.com/advisory/ntap-20221111-0007/
- https://ubuntu.com/security/notices/USN-5615-1
- https://www.cve.org/CVERecord?id=CVE-2020-35527
- https://www.sqlite.org/src/info/c431b3fd8fd0f6a6