alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
Fix
Patch, vendor advisory and mitigation references on NVD 6
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf Patch, Third Party Advisory
- https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06 Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf Patch, Third Party Advisory
- https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06 Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · sqlite, netapp, oracleNVD modified 2026-10-14 08:16
Affected (CPE criteria) 6
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*
References 14
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf Patch, Third Party Advisory
- https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06 Patch, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191223-0001/ Third Party Advisory
- https://usn.ubuntu.com/4394-1/ Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory
- https://www.tenable.com/security/tns-2021-14 Third Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf Patch, Third Party Advisory
- https://github.com/sqlite/sqlite/commit/38096961c7cd109110ac21d3ed7dad7e0cb0ae06 Patch, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20191223-0001/ Third Party Advisory
- https://usn.ubuntu.com/4394-1/ Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html Patch, Third Party Advisory
- https://www.tenable.com/security/tns-2021-14 Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html