CVE-2020-11656: Netapp Ontap Select Deploy Administration Utility

Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days.

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

Affected products

• Netapp Ontap Select Deploy Administration Utility: affected versions not specified
• Oracle Communications Messaging Server: version 8.1 only
• Oracle Communications Network Charging And Control: from 12.0.0, up to and including 12.0.3; version 6.0.1 only; version 12.0.2 only
• Oracle Enterprise Manager Ops Center: version 12.4.0.0 only
• Oracle Hyperion Infrastructure Technology: version 11.1.2.4 only
• Oracle MySQL: from 8.0.0, up to and including 8.0.22
• Oracle MySQL Workbench: up to and including 8.0.22
• Oracle Outside In Technology: version 8.5.4 only; version 8.5.5 only
• Oracle ZFS Storage Appliance Kit: version 8.8 only
• Siemens Sinec Infrastructure Network Services: before 1.0.1.1 (fixed in 1.0.1.1)
• Sqlite Sqlite: up to and including 3.31.1
• Tenable Tenable.sc: up to and including 5.19.0

Published 2020-04-09. Last modified 2026-06-17.