NetSight
IP …
high7.5

CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's ini…

Impact

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

Affected products

VendorProductAffected versions
SqliteSqlite
through 3.31.1
NetappOntap Select Deploy Administration Utility
All versions
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.10, 20.04
OracleCommunications Element Manager
from 8.2.0 through 8.2.2
OracleCommunications Network Charging And Control
from 12.0.0 through 12.0.3
Versions 6.0.1, 12.0.2
OracleCommunications Session Report Manager
from 8.2.0 through 8.2.2
OracleCommunications Session Route Manager
from 8.2.0 through 8.2.2
OracleEnterprise Manager Ops Center
Version 12.4.0.0
OracleHyperion Infrastructure Technology
Version 11.1.2.4
OracleInstantis Enterprisetrack
Versions 17.1, 17.2, 17.3
OracleMysql
from 8.0.0 through 8.0.22

Weakness classification

CWE-665

References