VDB
BDU%3A2020-03282
BDU%3A2020-03282
PUBLISHED
CVSS 6.900000095367432 MEDIUM
Уязвимость библиотеки для работы с реляционными СУБД SQLAlchemy, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
6.900000095367432
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Novell Inc., Сообщество свободного программного обеспечения, Mike Bayer, Oracle Corp., АО «Концерн ВНИИНС» | Red Hat Enterprise Linux, OpenSUSE Leap, Debian GNU/Linux, Red Hat OpenStack Platform, Red Hat Ceph Storage, SQLAlchemy, openSUSE Backports, Enterprise Communications Broker, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Jul 15, 2020 CVE Published
- Nov 21, 2023 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
References
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00087.html url
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00010.html url
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00016.html url
- https://access.redhat.com/errata/RHSA-2019:0981 url
- https://access.redhat.com/errata/RHSA-2019:0984 url
- https://github.com/no-security/sqlalchemy_test url
- https://github.com/sqlalchemy/sqlalchemy/issues/4481#issuecomment-461204518 url
- https://lists.debian.org/debian-lts-announce/2019/03/msg00020.html url
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url
- https://access.redhat.com/security/cve/CVE-2019-7548 advisory