CVEs-PoC/2020/CVE-2020-13631.md

CVE-2020-13631

Description

SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

POC

Reference

• http://seclists.org/fulldisclosure/2020/Nov/19
• https://www.oracle.com/security-alerts/cpujul2020.html
• https://www.oracle.com/security-alerts/cpuoct2020.html

Github

• https://github.com/garethr/snykout
• https://github.com/garethr/snykt