CVE-2020-13631

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
References
Link Resource
http://seclists.org/fulldisclosure/2020/Dec/32 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/19 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/20 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/22 Mailing List Third Party Advisory
https://bugs.chromium.org/p/chromium/issues/detail?id=1080459 Permissions Required Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf Patch Third Party Advisory
https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c%40%3Cissues.guacamole.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc Mitigation Third Party Advisory
https://security.gentoo.org/glsa/202007-26 Third Party Advisory
https://security.netapp.com/advisory/ntap-20200608-0002/ Third Party Advisory
https://sqlite.org/src/info/eca0ba2cf4c0fdf7 Patch Vendor Advisory
https://support.apple.com/kb/HT211843 Release Notes Third Party Advisory
https://support.apple.com/kb/HT211844 Release Notes Third Party Advisory
https://support.apple.com/kb/HT211850 Release Notes Third Party Advisory
https://support.apple.com/kb/HT211931 Release Notes Third Party Advisory
https://support.apple.com/kb/HT211935 Release Notes Third Party Advisory
https://support.apple.com/kb/HT211952 Release Notes Third Party Advisory
https://usn.ubuntu.com/4394-1/ Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*

Configuration 5 (hide)

cpe:2.3:o:brocade:fabric_operating_system:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Configuration 7 (hide)

cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*

Configuration 8 (hide)

OR cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Configuration 9 (hide)

OR cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*
cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*

History

13 May 2022, 20:56

Type Values Removed Values Added
CPE cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
cpe:2.3:o:brocade:fabric_operating_system:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*
References (FULLDISC) http://seclists.org/fulldisclosure/2020/Nov/22 - (FULLDISC) http://seclists.org/fulldisclosure/2020/Nov/22 - Mailing List, Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT211952 - (CONFIRM) https://support.apple.com/kb/HT211952 - Release Notes, Third Party Advisory
References (MISC) https://www.oracle.com/security-alerts/cpujul2020.html - (MISC) https://www.oracle.com/security-alerts/cpujul2020.html - Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2020/Nov/19 - (FULLDISC) http://seclists.org/fulldisclosure/2020/Nov/19 - Mailing List, Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2020/Dec/32 - (FULLDISC) http://seclists.org/fulldisclosure/2020/Dec/32 - Mailing List, Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT211931 - (CONFIRM) https://support.apple.com/kb/HT211931 - Release Notes, Third Party Advisory
References (UBUNTU) https://usn.ubuntu.com/4394-1/ - (UBUNTU) https://usn.ubuntu.com/4394-1/ - Patch, Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2020/Nov/20 - (FULLDISC) http://seclists.org/fulldisclosure/2020/Nov/20 - Mailing List, Third Party Advisory
References (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - Patch, Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT211850 - (CONFIRM) https://support.apple.com/kb/HT211850 - Release Notes, Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT211843 - (CONFIRM) https://support.apple.com/kb/HT211843 - Release Notes, Third Party Advisory
References (FREEBSD) https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc - (FREEBSD) https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc - Mitigation, Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT211844 - (CONFIRM) https://support.apple.com/kb/HT211844 - Release Notes, Third Party Advisory
References (GENTOO) https://security.gentoo.org/glsa/202007-26 - (GENTOO) https://security.gentoo.org/glsa/202007-26 - Third Party Advisory
References (MISC) https://www.oracle.com/security-alerts/cpuoct2020.html - (MISC) https://www.oracle.com/security-alerts/cpuoct2020.html - Third Party Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/ - Third Party Advisory (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/ - Mailing List, Third Party Advisory
References (CONFIRM) https://support.apple.com/kb/HT211935 - (CONFIRM) https://support.apple.com/kb/HT211935 - Release Notes, Third Party Advisory
References (MLIST) https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E - (MLIST) https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E - Mailing List, Third Party Advisory

10 Mar 2022, 17:41

Type Values Removed Values Added
References
  • (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf -

18 Jun 2021, 15:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.apache.org/thread.html/rc713534b10f9daeee2e0990239fa407e2118e4aa9e88a7041177497c@%3Cissues.guacamole.apache.org%3E -

Information

Published : 2020-05-27 15:15

Updated : 2024-02-04 21:00


NVD link : CVE-2020-13631

Mitre link : CVE-2020-13631

CVE.ORG link : CVE-2020-13631


JSON object : View

Products Affected

sqlite

  • sqlite

canonical

  • ubuntu_linux

apple

  • watchos
  • iphone_os
  • ipados
  • tvos
  • macos
  • itunes
  • icloud

fedoraproject

  • fedora

oracle

  • outside_in_technology
  • communications_network_charging_and_control
  • zfs_storage_appliance_kit

netapp

  • solidfire\,_enterprise_sds_\&_hci_storage_node
  • hci_compute_node_firmware
  • hci_compute_node
  • cloud_backup

siemens

  • sinec_infrastructure_network_services

brocade

  • fabric_operating_system