SQLite up to 3.31.x Virtual Table alter.c privileges management

Summaryinfo

A vulnerability was found in SQLite up to 3.31.x and classified as critical. Affected by this vulnerability is an unknown functionality of the file alter.c of the component Virtual Table Handler. The manipulation results in privileges management. This vulnerability was named CVE-2020-13631. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability classified as critical has been found in SQLite up to 3.31.x. Affected is an unknown code of the file alter.c of the component Virtual Table Handler. The manipulation with an unknown input leads to a privileges management vulnerability. CWE is classifying the issue as CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

The weakness was presented 05/27/2020. This vulnerability is traded as CVE-2020-13631 since 05/27/2020. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1068.

The vulnerability scanner Nessus provides a plugin with the ID 210754 (F5 Networks BIG-IP : SQLite vulnerability (K000148494)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 3.32.0 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (210754). See VDB-155629 and VDB-155627 for similar entries. Once again VulDB remains the best source for vulnerability data.

Productinfo

Name

• SQLite

Version

• 3.0
• 3.1
• 3.2
• 3.3
• 3.4
• 3.5
• 3.6
• 3.7
• 3.8
• 3.9
• 3.10
• 3.11
• 3.12
• 3.13
• 3.14
• 3.15
• 3.16
• 3.17
• 3.18
• 3.19
• 3.20
• 3.21
• 3.22
• 3.23
• 3.24
• 3.25
• 3.26
• 3.27
• 3.28
• 3.29
• 3.30
• 3.31

License

• free

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion