Vulnerability CVE-2020-13631: Information

Description

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Published: May 27, 2020
Modified: Nov. 7, 2023

Fixed packages

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugs.chromium.org/p/chromium/issues/detail?id=1080459
  • Permissions Required
  • Third Party Advisory
https://sqlite.org/src/info/eca0ba2cf4c0fdf7
  • Patch
  • Vendor Advisory
https://security.netapp.com/advisory/ntap-20200608-0002/
  • Third Party Advisory
USN-4394-1
  • Patch
  • Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html
  • Third Party Advisory
GLSA-202007-26
  • Third Party Advisory
FreeBSD-SA-20:22
  • Mitigation
  • Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html
  • Third Party Advisory
https://support.apple.com/kb/HT211931
  • Release Notes
  • Third Party Advisory
https://support.apple.com/kb/HT211844
  • Release Notes
  • Third Party Advisory
https://support.apple.com/kb/HT211850
  • Release Notes
  • Third Party Advisory
https://support.apple.com/kb/HT211843
  • Release Notes
  • Third Party Advisory
https://support.apple.com/kb/HT211952
  • Release Notes
  • Third Party Advisory
20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0
  • Mailing List
  • Third Party Advisory
20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0
  • Mailing List
  • Third Party Advisory
20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0
  • Mailing List
  • Third Party Advisory
https://support.apple.com/kb/HT211935
  • Release Notes
  • Third Party Advisory
20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1
  • Mailing List
  • Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
  • Patch
  • Third Party Advisory
FEDORA-2020-0477f8840e
    [guacamole-issues] 20210618 [jira] [Created] (GUACAMOLE-1368) Latest docker image fails security scans.
        1. Configuration 1

          cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*
          End excliding
          3.32.0

          Configuration 2

          cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

          Configuration 3

          cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

          cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

          cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

          cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

          Configuration 4

          cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*

          cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*

          Configuration 5

          cpe:2.3:o:brocade:fabric_operating_system:-:*:*:*:*:*:*:*

          Configuration 6

          cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*

          Running on/with:
          cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

          Configuration 7

          cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*
          End excliding
          1.0.1.1

          Configuration 8

          cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
          End excliding
          14.0

          cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
          End excliding
          7.0

          cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
          End excliding
          14.0

          cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
          End excliding
          14.0

          cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
          End excliding
          11.5

          cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
          End excliding
          12.10.9

          cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
          End excliding
          11.0.1

          Configuration 9

          cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*

          cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*

          cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*

          cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*
          Start including
          12.0.0
          End including
          12.0.3

          cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*