NetSight
IP …
critical9.8

CVE-2020-11656

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statemen…

Impact

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

Affected products

VendorProductAffected versions
SqliteSqlite
through 3.31.1
NetappOntap Select Deploy Administration Utility
All versions
OracleCommunications Network Charging And Control
from 12.0.0 through 12.0.3
Versions 6.0.1, 12.0.2
OracleEnterprise Manager Ops Center
Version 12.4.0.0
OracleHyperion Infrastructure Technology
Version 11.1.2.4
OracleMysql
from 8.0.0 through 8.0.22
OracleMysql Workbench
through 8.0.22
OracleOutside In Technology
Versions 8.5.4, 8.5.5
OracleZfs Storage Appliance Kit
Version 8.8
OracleCommunications Messaging Server
Version 8.1
SiemensSinec Infrastructure Network Services
before 1.0.1.1
TenableTenable.Sc
through 5.19.0

Weakness classification

CWE-416

References