ZeroDay Findings
Sign inSign up

Findings

CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initializat…

Published Apr 9, 2020 · updated Oct 14, 2026 · sqlite sqlite

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 9, 2020 · NIST NVD

    Detected

    SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

  2. Oct 14, 2026 · NIST NVD

    Updated

    SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

Affected

  • cpe canonical/ubuntu linux16.04
  • cpe canonical/ubuntu linux18.04
  • cpe canonical/ubuntu linux19.10
  • cpe canonical/ubuntu linux20.04
  • cpe debian/debian linux8.0
  • cpe debian/debian linux9.0
  • cpe netapp/ontap select deploy administration utilityversion unspecified
  • cpe oracle/communications element managerversion unspecified
  • cpe siemens/sinec infrastructure network servicesversion unspecified
  • cpe sqlite/sqliteversion unspecified
  • cpe tenable/tenable.scversion unspecified

Sources

  • CVE.orgCVE-2020-11655

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2020-11655

    SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

    nvd.nist.gov

References