CVE-2020-11655
- State
- Published
- Severity
- Not scored
- Published
- Apr 9, 2020
- Updated
- Oct 14, 2026
- Reserved
- Apr 9, 2020
Description
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [debian-lts-announce] 20200505 [SECURITY] [DLA 2203-1] sqlite3 security updatemailing-list
- USN-4394-1vendor-advisory
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www3.sqlite.org/cgi/src/tktview?name=af4556bb5c
- https://www3.sqlite.org/cgi/src/info/4a302b42c7bf5e11
- https://security.netapp.com/advisory/ntap-20200416-0001/
- GLSA-202007-26vendor-advisory
- FreeBSD-SA-20:22vendor-advisory
- [debian-lts-announce] 20200822 [SECURITY] [DLA 2340-1] sqlite3 security updatemailing-list
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.tenable.com/security/tns-2021-14
- https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
- https://cert-portal.siemens.com/productcert/html/ssa-389290.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.