CVE-2020-13631medium
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
References
https://bugs.chromium.org/p/chromium/issues/detail?id=1080459
https://sqlite.org/src/info/eca0ba2cf4c0fdf7
https://security.netapp.com/advisory/ntap-20200608-0002/
https://usn.ubuntu.com/4394-1/
https://www.oracle.com/security-alerts/cpujul2020.html
https://security.gentoo.org/glsa/202007-26
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc
https://www.oracle.com/security-alerts/cpuoct2020.html
https://support.apple.com/kb/HT211931
https://support.apple.com/kb/HT211844
https://support.apple.com/kb/HT211850
https://support.apple.com/kb/HT211843
https://support.apple.com/kb/HT211952
http://seclists.org/fulldisclosure/2020/Nov/19
http://seclists.org/fulldisclosure/2020/Nov/22
http://seclists.org/fulldisclosure/2020/Nov/20
https://support.apple.com/kb/HT211935
http://seclists.org/fulldisclosure/2020/Dec/32
https://lists.apache.org/thread.html/[email protected]%3Cissues.guacamole.apache.org%3E
Details
Source: MITRE
Published: 2020-05-27
Updated: 2021-06-18
Type: NVD-CWE-noinfo
Risk Information
CVSS v2
Base Score: 2.1
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Impact Score: 2.9
Exploitability Score: 3.9
Severity: LOW
CVSS v3
Base Score: 5.5
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
Configuration 2
OR
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 153643 | SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2021:3215-1) | Nessus | SuSE Local Security Checks | critical |
| 152986 | Tenable SecurityCenter < 5.19.0 Multiple Vulnerabilities (TNS-2021-14) | Nessus | Misc. | high |
| 151985 | Tenable.sc < 5.19.0 Multiple Vulnerabilities (TNS-2021-14) (deprecated) | Nessus | Misc. | high |
| 151816 | openSUSE 15 Security Update : sqlite3 (openSUSE-SU-2021:1058-1) | Nessus | SuSE Local Security Checks | critical |
| 151748 | openSUSE 15 Security Update : sqlite3 (openSUSE-SU-2021:2320-1) | Nessus | SuSE Local Security Checks | critical |
| 151654 | SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2021:2320-1) | Nessus | SuSE Local Security Checks | critical |
| 149744 | CentOS 8 : mingw packages (CESA-2021:1968) | Nessus | CentOS Local Security Checks | high |
| 149666 | RHEL 8 : mingw packages (RHSA-2021:1968) | Nessus | Red Hat Local Security Checks | high |
| 147397 | NewStart CGSL MAIN 6.02 : sqlite Multiple Vulnerabilities (NS-SA-2021-0064) | Nessus | NewStart CGSL Local Security Checks | high |
| 145815 | CentOS 8 : sqlite (CESA-2020:4442) | Nessus | CentOS Local Security Checks | high |
| 143115 | macOS 11.0.x < 11.0.1 | Nessus | MacOS X Local Security Checks | high |
| 142752 | Oracle Linux 8 : sqlite (ELSA-2020-4442) | Nessus | Oracle Linux Local Security Checks | high |
| 142429 | RHEL 8 : sqlite (RHSA-2020:4442) | Nessus | Red Hat Local Security Checks | high |
| 138949 | GLSA-202007-26 : SQLite: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | critical |
| 137439 | FreeBSD : several security issues in sqlite3 (c4ac9c79-ab37-11ea-8b5e-b42e99a1b9c3) | Nessus | FreeBSD Local Security Checks | high |
| 137353 | Ubuntu 16.04 LTS / 18.04 LTS / 19.10 / 20.04 : SQLite vulnerabilities (USN-4394-1) | Nessus | Ubuntu Local Security Checks | high |
| 137322 | Photon OS 1.0: Sqlite PHSA-2020-1.0-0298 | Nessus | PhotonOS Local Security Checks | high |
| 137193 | Photon OS 2.0: Sqlite PHSA-2020-2.0-0249 | Nessus | PhotonOS Local Security Checks | high |
| 137188 | Photon OS 3.0: Sqlite PHSA-2020-3.0-0101 | Nessus | PhotonOS Local Security Checks | high |
| 137102 | Fedora 32 : sqlite (2020-0477f8840e) | Nessus | Fedora Local Security Checks | high |