CVE-2020-35527

Name of the Vulnerable Software and Affected Versions SQLite version 3.31.1

Description The issue is caused by an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. This can be exploited by a remote attacker to execute arbitrary code. The problem is also described as a buffer overflow in the database management system.

Recommendations For SQLite version 3.31.1, consider restricting access to the ALTER TABLE statement for views with nested FROM clauses until a patch is available. As a temporary workaround, avoid using the ALTER TABLE statement on views that have a nested FROM clause to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.