CVE-2020-35527
CVE-2020-35527
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause.
CVSS 9.8 · Critical · EPSS 1.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
sqlite
- Versions
- sqlite 3.31.1: Affected
No fix published
sqlite3 Debian:12
- Affected ranges
- ECOSYSTEM: < 3.32.0-1
Update to 3.32.0-1
sqlite3 Debian:13
- Affected ranges
- ECOSYSTEM: < 3.32.0-1
Update to 3.32.0-1
sqlite3 Debian:14
- Affected ranges
- ECOSYSTEM: < 3.32.0-1
Update to 3.32.0-1
sqlite3 Ubuntu:Pro:14.04:LTS
- Versions
- 3.7.17-1ubuntu1
- 3.8.0.2-1ubuntu1
- 3.8.1-1ubuntu1
- 3.8.1-1ubuntu3
- 3.8.2-1ubuntu1
- 3.8.2-1ubuntu2
- 3.8.2-1ubuntu2.1
- 3.8.2-1ubuntu2.2
- 3.8.2-1ubuntu2.2+esm1
- 3.8.2-1ubuntu2.2+esm2
- 3.8.2-1ubuntu2.2+esm3
- 3.8.2-1ubuntu2.2+esm4
- 3.8.2-1ubuntu2.2+esm5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
sqlite3 Ubuntu:Pro:16.04:LTS
- Versions
- 3.8.11.1-1
- 3.9.1-2
- 3.9.2-1
- 3.10.0-1
- 3.10.1-1
- 3.10.2-1
- 3.11.0-1ubuntu1
- 3.11.0-1ubuntu1.1
- 3.11.0-1ubuntu1.2
- 3.11.0-1ubuntu1.3
- 3.11.0-1ubuntu1.4
- 3.11.0-1ubuntu1.5
- 3.11.0-1ubuntu1.5+esm1
- 3.11.0-1ubuntu1.5+esm2
- 3.11.0-1ubuntu1.5+esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
sqlite3 Ubuntu:Pro:18.04:LTS
- Versions
- 3.19.3-3
- 3.20.1-2
- 3.21.0-1
- 3.22.0-1
- 3.22.0-1ubuntu0.1
- 3.22.0-1ubuntu0.2
- 3.22.0-1ubuntu0.3
- 3.22.0-1ubuntu0.4
- 3.22.0-1ubuntu0.5
- 3.22.0-1ubuntu0.6
- 3.22.0-1ubuntu0.7
- 3.22.0-1ubuntu0.7+esm1
- 3.22.0-1ubuntu0.7+esm2
- 3.22.0-1ubuntu0.7+esm3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
sqlite3 Ubuntu:20.04:LTS
- Versions
- 3.29.0-2
- 3.30.1-1
- 3.30.1-1ubuntu1
- 3.31.1-1ubuntu1
- 3.31.1-3
- 3.31.1-4
- 3.31.1-4ubuntu0.1
- 3.31.1-4ubuntu0.2
- 3.31.1-4ubuntu0.3
- Affected ranges
- ECOSYSTEM: < 3.31.1-4ubuntu0.4
Update to 3.31.1-4ubuntu0.4