CVEvulnerability

CVE-2020-11655

7.5 HIGH Published 2020-04-09 Modified 2026-10-14 Official page ↗
Status
Modified
Published
2020-04-09
Last modified
2026-10-14
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-665

Description

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

Affected configurations

• sqlite sqlite (<= 3.31.1) • netapp ontap select deploy administration utility • debian debian linux 8.0 • debian debian linux 9.0 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • canonical ubuntu linux 19.10 • canonical ubuntu linux 20.04 • oracle communications element manager (>= 8.2.0 <= 8.2.2) • oracle communications network charging and control (>= 12.0.0 <= 12.0.3) • oracle communications network charging and control 6.0.1 • oracle communications network charging and control 12.0.2 • oracle communications session report manager (>= 8.2.0 <= 8.2.2) • oracle communications session route manager (>= 8.2.0 <= 8.2.2) • oracle enterprise manager ops center 12.4.0.0 • oracle hyperion infrastructure technology 11.1.2.4 • oracle instantis enterprisetrack 17.1 • oracle instantis enterprisetrack 17.2 • oracle instantis enterprisetrack 17.3 • oracle mysql (>= 8.0.0 <= 8.0.22) • oracle mysql workbench (<= 8.0.22) • oracle outside in technology 8.5.4 • oracle outside in technology 8.5.5 • oracle zfs storage appliance kit 8.8 • oracle communications messaging server 8.1 • siemens sinec infrastructure network services (< 1.0.1.1) • tenable tenable.sc (< 5.19.0)

Related

Weakness · CWE (1)

  • CWE-665 Improper Initialization weakness

References