{"id":"CVE-2020-11655","aliases":["ALPINE-CVE-2020-11655","AZL-39034","BELL-CVE-2020-11655","BIT-sqlite-2020-11655","DEBIAN-CVE-2020-11655","DLA-2203-1","DLA-2340-1","EUVD-2020-3998","GHSA-f86q-8q37-c2x4","MGASA-2021-0303","UBUNTU-CVE-2020-11655","USN-4394-1"],"status":"published","title":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.04304,"percentile":0.91226,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-665"],"published":"2020-04-09T02:49:33Z","modified":"2026-10-26T12:01:20Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"sqlite","fixed_in":["3.28.0-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"sqlite","fixed_in":["3.30.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"sqlite","fixed_in":["3.30.1-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"sqlite","fixed_in":["3.25.0-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"sqlite","fixed_in":["3.28.0-r3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"ceph","fixed_in":["18.2.1-1"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"sqlite","fixed_in":["3.31.2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"sqlite3","fixed_in":["3.31.1-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sqlite3","fixed_in":["3.31.1-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sqlite3","fixed_in":["3.31.1-5"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"sqlite3","fixed_in":["3.8.7.1-1+deb8u5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"sqlite3","fixed_in":["3.31.1-4ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.0-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.30.1-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.0-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.28.0-r3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"18.2.1-1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"sqlite","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.31.2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.31.1-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.31.1-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.31.1-5"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.7.1-1+deb8u5"}]}],"versions":["3.8.7.1-1","3.8.7.1-1+deb8u1","3.8.7.1-1+deb8u2","3.8.7.1-1+deb8u3","3.8.7.1-1+deb8u4"]},{"source":"osv","ecosystem":"Debian:9","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.2-5+deb9u2"}]}],"versions":["3.16.2-5","3.16.2-5+deb9u1"],"bundled":12},{"source":"osv","ecosystem":"Mageia:7","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.31.1-1.1.mga7"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.17-8fakesync1","2.8.17-9fakesync1","2.8.17-10ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.17-12fakesync1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.17-14fakesync1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.31.1-4ubuntu0.1"}]}],"versions":["3.29.0-2","3.30.1-1","3.30.1-1ubuntu1","3.31.1-1ubuntu1","3.31.1-3","3.31.1-4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.17-15fakesync1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sqlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.17-15fakesync1build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-1ubuntu1.5"}]}],"versions":["3.8.11.1-1","3.9.1-2","3.9.2-1","3.10.0-1","3.10.1-1","3.10.2-1","3.11.0-1ubuntu1","3.11.0-1ubuntu1.1","3.11.0-1ubuntu1.2","3.11.0-1ubuntu1.3","3.11.0-1ubuntu1.4"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.22.0-1ubuntu0.4"}]}],"versions":["3.19.3-3","3.20.1-2","3.21.0-1","3.22.0-1","3.22.0-1ubuntu0.1","3.22.0-1ubuntu0.2","3.22.0-1ubuntu0.3"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sqlite3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.31.1-4ubuntu0.1"}]}],"versions":["3.29.0-2","3.30.1-1","3.30.1-1ubuntu1","3.31.1-1ubuntu1","3.31.1-3","3.31.1-4"],"bundled":9}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"oracle","product":"communications_element_manager"},{"vendor":"oracle","product":"communications_messaging_server"},{"vendor":"oracle","product":"communications_network_charging_and_control"},{"vendor":"oracle","product":"communications_session_report_manager"},{"vendor":"oracle","product":"communications_session_route_manager"},{"vendor":"oracle","product":"enterprise_manager_ops_center"},{"vendor":"oracle","product":"hyperion_infrastructure_technology"},{"vendor":"oracle","product":"instantis_enterprisetrack"},{"vendor":"oracle","product":"mysql"},{"vendor":"oracle","product":"mysql_workbench"},{"vendor":"oracle","product":"outside_in_technology"},{"vendor":"oracle","product":"zfs_storage_appliance_kit"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"sinec_infrastructure_network_services"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"sqlite","product":"sqlite"},{"vendor":"tenable","product":"tenable.sc"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2020/05/msg00006.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4394-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www3.sqlite.org/cgi/src/tktview?name=af4556bb5c","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory","advisory","evidence"]},{"url":"https://www3.sqlite.org/cgi/src/info/4a302b42c7bf5e11","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix","report"]},{"url":"https://security.netapp.com/advisory/ntap-20200416-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202007-26","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00037.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2021.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuApr2021.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.tenable.com/security/tns-2021-14","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-389290.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11655","tags":["web"]},{"url":"https://usn.ubuntu.com/4394-1"},{"url":"https://security.netapp.com/advisory/ntap-20200416-0001"},{"url":"https://github.com/advisories/GHSA-f86q-8q37-c2x4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-11655","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-11655","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-11655","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0303.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26270","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4442","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2340","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/BN32AGQPMHZRNM6P6L5GZPETOWTGXOKP/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-4438-1","tags":["advisory"]},{"url":"https://www.sqlite.org/releaselog/3_32_3.html","tags":["web"]},{"url":"https://www.sqlite.org/releaselog/3_32_2.html","tags":["web"]},{"url":"https://www.sqlite.org/releaselog/3_32_1.html","tags":["web"]},{"url":"https://www.sqlite.org/releaselog/3_32_0.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/L7KXQWHIY2MQP4LNM6ODWJENMXYYQYBN/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2020/dla-2221","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-11655","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4394-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11655","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-8740","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19603","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-19645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13630","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13631","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-13632","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-11655","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","status":"published","published":"2020-04-09T02:49:33Z","modified":"2026-10-14T09:00:48.635Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-3998","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","status":"published","published":"2020-04-09T02:49:33Z","modified":"2026-10-14T09:00:48Z","updated_at":"2026-11-02T17:27:17.374818Z"}],"ghsa":[{"id":"GHSA-f86q-8q37-c2x4","title":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","status":"published","published":"2022-05-24T17:13:57Z","modified":"2026-10-14T09:31:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20","CWE-665"],"updated_at":"2026-11-02T15:13:22.867821Z"}],"nvd":[{"id":"CVE-2020-11655","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","status":"published","published":"2020-04-09T03:15:11.363Z","modified":"2026-10-14T09:17:18.097Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-665"],"updated_at":"2026-11-02T14:05:57.678762Z"}],"osv":[{"id":"ALPINE-CVE-2020-11655","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","status":"published","published":"2020-04-09T03:15:11.363Z","modified":"2026-10-26T11:17:55.099770161Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"AZL-39034","title":"CVE-2020-11655 affecting package ceph for versions less than 18.2.1-1","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","status":"published","published":"2020-04-09T03:15:11Z","modified":"2026-04-21T04:53:39.183182Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"BELL-CVE-2020-11655","title":"CVE-2020-11655 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:01.443927Z","modified":"2026-01-26T09:49:54.419967Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2020-11655","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","status":"published","published":"2020-04-09T03:15:11.363Z","modified":"2026-10-24T10:30:30.79586735Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:14.034736Z"},{"id":"DEBIAN-CVE-2020-11655","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","status":"published","published":"2020-04-09T03:15:11.363Z","modified":"2026-10-26T12:01:20.467190818Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"UBUNTU-CVE-2020-11655","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","status":"published","published":"2020-04-09T03:15:00Z","modified":"2026-04-22T12:26:20.77283Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"BIT-sqlite-2020-11655","description":"SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.","status":"published","published":"2024-03-06T11:08:37.674Z","modified":"2026-10-16T09:45:22.482663201Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"DLA-2203-1","title":"sqlite3 - security update","status":"published","published":"2020-05-05T00:00:00Z","modified":"2026-03-09T01:21:29.049735Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2340-1","title":"sqlite3 - security update","status":"published","published":"2020-08-22T00:00:00Z","modified":"2026-03-09T01:23:17.285848Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"MGASA-2021-0303","title":"Updated sqlite3 packages fix security vulnerabilities","description":"In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL\npointer dereference and segmentation fault because of generated column\noptimizations (CVE-2020-9327).\n\nSQLite through 3.31.1 allows attackers to cause a denial of service\n(segmentation fault) via a malformed window-function query because the\nAggInfo object's initialization is mishandled\n(CVE-2020-11655).\n\nSQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in\nprintf.c (CVE-2020-13434).\n\nSQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in\nexpr.c (CVE-2020-13435).\n\next/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow,\nrelated to the snippet feature (CVE-2020-13630).\n\nSQLite before 3.32.0 allows a virtual table to be renamed to the name of one\nof its shadow tables, related to alter.c and build.c (CVE-2020-13631).\n\next/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference\nvia a crafted matchinfo() query (CVE-2020-13632).\n\nSQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the\nparse tree rewrite for window functions is too late (CVE-2020-13871).\n\nIn SQLite before 3.32.3, select.c mishandles query-flattener optimization,\nleading to a multiSelectOrderBy heap overflow because of misuse of transitive\nproperties for constant propagation (CVE-2020-15358).\n","status":"published","published":"2021-06-30T23:58:41Z","modified":"2026-04-16T04:43:20.731127999Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"USN-4394-1","title":"sqlite3 vulnerabilities","description":"It was discovered that SQLite incorrectly handled certain corruped schemas.\nAn attacker could possibly use this issue to cause a denial of service.\nThis issue only affected Ubuntu 18.04 LTS. (CVE-2018-8740)\n\nIt was discovered that SQLite incorrectly handled certain SELECT\nstatements. An attacker could possibly use this issue to cause a denial of\nservice. This issue was only addressed in Ubuntu 19.10. (CVE-2019-19603)\n\nIt was discovered that SQLite incorrectly handled certain self-referential\nviews. An attacker could possibly use this issue to cause a denial of\nservice. This issue was only addressed in Ubuntu 19.10. (CVE-2019-19645)\n\nHenry Liu discovered that SQLite incorrectly handled certain malformed\nwindow-function queries. An attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 19.10 and Ubuntu 20.04\nLTS. (CVE-2020-11655)\n\nIt was discovered that SQLite incorrectly handled certain string\noperations. An attacker could use this issue to cause SQLite to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2020-13434)\n\nIt was discovered that SQLite incorrectly handled certain expressions. An\nattacker could use this issue to cause SQLite to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-13435)\n\nIt was discovered that SQLite incorrectly handled certain fts3 queries. An\nattacker could use this issue to cause SQLite to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2020-13630)\n\nIt was discovered that SQLite incorrectly handled certain virtual table\nnames. An attacker could possibly use this issue to cause a denial of\nservice. This issue was only addressed in Ubuntu 19.10 and Ubuntu 20.04\nLTS. (CVE-2020-13631)\n\nIt was discovered that SQLite incorrectly handled certain fts3 queries. An\nattacker could use this issue to cause SQLite to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2020-13632)\n","status":"published","published":"2020-06-10T13:36:53Z","modified":"2026-04-27T15:48:43.777096828Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}