critique
CVE-2020-35527
sqlite: Out of bounds access during table rename
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Bitnami9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD, Bitnami. Plus basse selon Red Hat (moyenne), AlmaLinux (moyenne), Oracle (moyenne), Rocky Linux (moyenne), Ubuntu (moyenne).
Description
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | sqlite | 3.31.2 |
| alma 8 | lemon, sqlite, sqlite-devel et 2 autres | 3.26.0-16.el8_6 |
| debian 10 | sqlite3 | 3.27.2-3+deb10u2 |
| debian 11 | sqlite3 | 3.32.0-1 |
| debian 12 | sqlite3 | 3.32.0-1 |
| debian 13 | sqlite3 | 3.32.0-1 |
| debian 14 | sqlite3 | 3.32.0-1 |
| echo | sqlite3 | 3.32.0-1 |
| Oracle Linux 8 | lemon, sqlite, sqlite-devel et 2 autres | 3.26.0-16.el8_6 |
| Red Hat | lemon, sqlite, sqlite-devel et 2 autres | pas de correctif indiqué |
| rocky 8 | lemon, sqlite, sqlite-devel et 2 autres | 3.26.0-16.el8_6 |
| root.io debian 11 | rootio-sqlite3 | 3.32.0-1 |
Afficher les 38 entrées de 19 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | sqlite | 3.31.2 |
| alma 8 | lemon | 3.26.0-16.el8_6 |
| alma 8 | sqlite | 3.26.0-16.el8_6 |
| alma 8 | sqlite-devel | 3.26.0-16.el8_6 |
| alma 8 | sqlite-doc | 3.26.0-16.el8_6 |
| alma 8 | sqlite-libs | 3.26.0-16.el8_6 |
| debian 10 | sqlite3 | 3.27.2-3+deb10u2 |
| debian 11 | sqlite3 | 3.32.0-1 |
| debian 12 | sqlite3 | 3.32.0-1 |
| debian 13 | sqlite3 | 3.32.0-1 |
| debian 14 | sqlite3 | 3.32.0-1 |
| echo | sqlite3 | 3.32.0-1 |
| Oracle Linux 8 | lemon | 3.26.0-16.el8_6 |
| Oracle Linux 8 | sqlite | 3.26.0-16.el8_6 |
| Oracle Linux 8 | sqlite-devel | 3.26.0-16.el8_6 |
| Oracle Linux 8 | sqlite-doc | 3.26.0-16.el8_6 |
| Oracle Linux 8 | sqlite-libs | 3.26.0-16.el8_6 |
| Red Hat | lemon | pas de correctif indiqué |
| Red Hat | sqlite | pas de correctif indiqué |
| Red Hat | sqlite-devel | pas de correctif indiqué |
| Red Hat | sqlite-doc | pas de correctif indiqué |
| Red Hat | sqlite-tcl | pas de correctif indiqué |
| rocky 8 | lemon | 3.26.0-16.el8_6 |
| rocky 8 | sqlite | 3.26.0-16.el8_6 |
| rocky 8 | sqlite-devel | 3.26.0-16.el8_6 |
| rocky 8 | sqlite-doc | 3.26.0-16.el8_6 |
| rocky 8 | sqlite-libs | 3.26.0-16.el8_6 |
| root.io debian 11 | rootio-sqlite3 | 3.32.0-1 |
| root.io debian 12 | rootio-sqlite3 | 3.32.0-1 |
| root.io debian 13 | rootio-sqlite3 | 3.32.0-1 |
| seal Red Hat 7 | seal-sqlite | 3.7.17-8.el7_7.1+sp999 |
| seal Red Hat 7 | sqlite | 3.7.17-8.el7_7.1+sp999 |
| seal Red Hat 8 | seal-sqlite | 3.26.0-19.el8_9+sp999 |
| seal Red Hat 8 | sqlite | 3.26.0-19.el8_9+sp999 |
| seal Red Hat 9 | seal-sqlite | 3.34.1-7.el9_3+sp999 |
| seal Red Hat 9 | sqlite | 3.34.1-7.el9_3+sp999 |
| ubuntu 20.04 | sqlite3 | 3.31.1-4ubuntu0.4 |
| ubuntu 20.04-ESM | sqlite3 | 3.31.1-4ubuntu0.4 |
Références
- https://access.redhat.com/errata/RHSA-2022:7108
- https://access.redhat.com/security/cve/CVE-2020-35527
- https://bugzilla.redhat.com/2122324
- https://bugzilla.redhat.com/2122329
- https://bugzilla.redhat.com/show_bug.cgi?id=2122324
- https://bugzilla.redhat.com/show_bug.cgi?id=2122329
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35525
Les 18 références
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35527
- https://errata.almalinux.org/8/ALSA-2022-7108.html
- https://errata.rockylinux.org/RLSA-2022:7108
- https://linux.oracle.com/cve/CVE-2020-35527.html
- https://linux.oracle.com/errata/ELSA-2022-7108.html
- https://nvd.nist.gov/vuln/detail/CVE-2020-35527
- https://security.netapp.com/advisory/ntap-20221111-0007/
- https://ubuntu.com/security/notices/USN-5615-1
- https://www.cve.org/CVERecord?id=CVE-2020-35527
- https://www.sqlite.org/src/info/c431b3fd8fd0f6a6