Findings

CVE-2020-13631

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

Published May 27, 2020 · updated Oct 14, 2026 · sqlite sqlite

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

Timeline

Detection, updates, and resolution for this record.

  1. May 27, 2020 · NIST NVD

    Detected

    SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

Affected

  • cpe apple/icloudversion unspecified
  • cpe broadcom/fabric operating systemversion unspecified
  • cpe canonical/ubuntu linux16.04
  • cpe canonical/ubuntu linux18.04
  • cpe canonical/ubuntu linux19.10
  • cpe canonical/ubuntu linux20.04
  • cpe fedoraproject/fedora32
  • cpe netapp/cloud backupversion unspecified
  • cpe netapp/hci compute node firmwareversion unspecified
  • cpe netapp/solidfire, enterprise sds & hci storage nodeversion unspecified
  • cpe siemens/sinec infrastructure network servicesversion unspecified
  • cpe sqlite/sqliteversion unspecified

Sources

  • CVE.orgCVE-2020-13631

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-13631

    30-day exploitation probability 0.7%

    first.org
  • NIST NVDCVE-2020-13631

    SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

    nvd.nist.gov

References

CVE-2020-13631 · ZeroDay Findings