Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Drh

#18363of 53,630
14.8Total CVSS
Vulnerabilities · 2
Medium
1
Critical
1
PT-2022-6929
9.8
2020-02-23
Sqlite · Sqlite · CVE-2020-35527
**Name of the Vulnerable Software and Affected Versions** SQLite version 3.31.1 **Description** The issue is caused by an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. This can be exploited by a remote attacker to execute arbitrary code. The problem is also described as a buffer overflow in the database management system. **Recommendations** For SQLite version 3.31.1, consider restricting access to the ALTER TABLE statement for views with nested FROM clauses until a patch is available. As a temporary workaround, avoid using the ALTER TABLE statement on views that have a nested FROM clause to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
PT-2015-3591
5.0
2015-07-15
Sqlite · Sqlite · CVE-2013-7443
**Name of the Vulnerable Software and Affected Versions** SQLite version 3.8.2 **Description** A buffer overflow issue exists in the skip-scan optimization, allowing remote attackers to cause a denial of service by crashing the system via crafted SQL statements. **Recommendations** For SQLite version 3.8.2, consider updating to a newer version that contains a fix for this issue. As a temporary workaround, restrict the execution of crafted SQL statements to minimize the risk of exploitation.