High severity7.5NVD Advisory· Published Apr 9, 2020· Updated Jun 17, 2026
CVE-2020-11655
CVE-2020-11655
Description
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
37- cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*Range: >=8.2.0,<=8.2.2
cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*range: >=12.0.0,<=12.0.3
- cpe:2.3:a:oracle:communications_network_charging_and_control:12.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*Range: >=8.2.0,<=8.2.2
- cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*Range: >=8.2.0,<=8.2.2
- cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*
cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*
- cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*Range: <1.0.1.1
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
- cpe:2.3:o:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*
- SQLite/SQLitedescription
- osv-coords8 versionspkg:apk/chainguard/mysql-8.0pkg:apk/chainguard/mysql-8.0-bitnami-compatpkg:apk/chainguard/mysql-8.0-clientpkg:apk/chainguard/mysql-8.0-devpkg:apk/chainguard/mysql-8.0-iamguarded-compatpkg:apk/chainguard/mysql-8.0-oci-entrypointpkg:apk/chainguard/mysql-8.0-oci-entrypoint-compatpkg:bitnami/sqlite
< 8.0.38-r0+ 7 more
- (no CPE)range: < 8.0.38-r0
- (no CPE)range: < 8.0.38-r0
- (no CPE)range: < 8.0.38-r0
- (no CPE)range: < 8.0.38-r0
- (no CPE)range: < 8.0.38-r0
- (no CPE)range: < 8.0.38-r0
- (no CPE)range: < 8.0.38-r0
- (no CPE)range: < 3.31.2
Patches
Vulnerability mechanics
References
14- cert-portal.siemens.com/productcert/pdf/ssa-389290.pdfnvdPatchThird Party Advisory
- www3.sqlite.org/cgi/src/info/4a302b42c7bf5e11nvdPatchVendor Advisory
- www3.sqlite.org/cgi/src/tktviewnvdExploitVendor Advisory
- lists.debian.org/debian-lts-announce/2020/05/msg00006.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/08/msg00037.htmlnvdMailing ListThird Party Advisory
- security.freebsd.org/advisories/FreeBSD-SA-20:22.sqlite.ascnvdThird Party Advisory
- security.gentoo.org/glsa/202007-26nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20200416-0001/nvdThird Party Advisory
- usn.ubuntu.com/4394-1/nvdThird Party Advisory
- www.oracle.com/security-alerts/cpuApr2021.htmlnvdThird Party Advisory
- www.oracle.com/security-alerts/cpujan2021.htmlnvdThird Party Advisory
- www.oracle.com/security-alerts/cpujul2020.htmlnvdThird Party Advisory
- www.oracle.com/security-alerts/cpuoct2020.htmlnvdThird Party Advisory
- www.tenable.com/security/tns-2021-14nvdRelease NotesThird Party Advisory
News mentions
1- ABB B&R Automation StudioCISA ICS Advisories