PT-2020-3858

CVE-2020-13631

·

تاريخ النشر

2020-05-14

·

تاريخ التحديث

2026-10-14

الوصف من

CVSS 3.1
5.5
متوسطة
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.32.0
Description: The issue is related to insufficient input validation in the alter.c and build.c components of the SQLite database management system. This can be exploited to rename arbitrary columns in a table, potentially leading to data corruption. A maliciously crafted SQL query may be used to exploit this issue.
Recommendations: For versions prior to 3.32.0, update to version 3.32.0 or later to resolve the issue. As a temporary workaround, consider restricting the execution of SQL queries that may exploit the insufficient input validation in alter.c and build.c components until a patch is applied.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALSA-2021:1968
ALT-PU-2020-2004
ALT-PU-2020-2898
AZL-38929
BIT-SQLITE-2020-13631
CESA-2020_4442
CESA-2021_1968
MGASA-2021-0303
OPENSUSE-SU-2021:1058-1
OPENSUSE-SU-2021_1058-1
OPENSUSE-SU-2021:2320-1
OPENSUSE-SU-2021_2320-1
OPENSUSE-SU-2024:11400-1
RHSA-2020:4442
RHSA-2020_4442
RHSA-2021:1968
RHSA-2021_1968
SUSE-SU-2021:2320-1
SUSE-SU-2021:3215-1
USN-4394-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾