CVE-2020-13631: 
SQLite vulnerability analysis and mitigation

SQLite before version 3.32.0 contains a vulnerability that allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c files (NVD, SQLite Commit). The vulnerability was discovered and disclosed on May 27, 2020.

The vulnerability exists in SQLite's virtual table implementation where a virtual table could be renamed to match the name of one of its shadow tables. The issue was addressed by adding additional validation checks to prevent this namespace collision. The fix involved modifying the alter.c and build.c files to validate table names before allowing rename operations (SQLite Commit).

When successfully exploited, this vulnerability could lead to data corruption or denial of service conditions. The vulnerability has a CVSS v3.1 base score of 7.5 (High) (NetApp Advisory).

The vulnerability requires an attacker who can execute SQL statements to rename a virtual table to exploit the issue. No known exploits were reported in the wild at the time of disclosure (FreeBSD Advisory).

The recommended mitigation is to upgrade SQLite to version 3.32.0 or later which contains the fix for this vulnerability. No workarounds were provided as alternatives to upgrading (Gentoo Advisory).