CVE-2020-11655: Canonical Ubuntu Linux
High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
Affected products
- Canonical Ubuntu Linux: version 16.04 only; version 18.04 only; version 19.10 only; version 20.04 only
- Debian Debian Linux: version 8.0 only; version 9.0 only
- Netapp Ontap Select Deploy Administration Utility: affected versions not specified
- Oracle Communications Element Manager: from 8.2.0, up to and including 8.2.2
- Oracle Communications Messaging Server: version 8.1 only
- Oracle Communications Network Charging And Control: from 12.0.0, up to and including 12.0.3; version 6.0.1 only; version 12.0.2 only
- Oracle Communications Session Report Manager: from 8.2.0, up to and including 8.2.2
- Oracle Communications Session Route Manager: from 8.2.0, up to and including 8.2.2
- Oracle Enterprise Manager Ops Center: version 12.4.0.0 only
- Oracle Hyperion Infrastructure Technology: version 11.1.2.4 only
- Oracle Instantis Enterprisetrack: version 17.1 only; version 17.2 only; version 17.3 only
- Oracle MySQL: from 8.0.0, up to and including 8.0.22
- Oracle MySQL Workbench: up to and including 8.0.22
- Oracle Outside In Technology: version 8.5.4 only; version 8.5.5 only
- Oracle ZFS Storage Appliance Kit: version 8.8 only
- Siemens Sinec Infrastructure Network Services: before 1.0.1.1 (fixed in 1.0.1.1)
- Sqlite Sqlite: up to and including 3.31.1
- Tenable Tenable.sc: before 5.19.0 (fixed in 5.19.0)
Published 2020-04-09. Last modified 2026-06-17.