CVE-2020-9327: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

Affected products

• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only; version 19.10 only
• Netapp Cloud Backup: affected versions not specified
• Oracle Communications Messaging Server: version 8.1 only
• Oracle Communications Network Charging And Control: from 12.0.0, up to and including 12.0.3; version 6.0.1 only; version 12.0.2 only
• Oracle Enterprise Manager Ops Center: version 12.4.0.0 only
• Oracle Hyperion Infrastructure Technology: version 11.1.2.4 only
• Oracle MySQL Workbench: up to and including 8.0.22
• Oracle Outside In Technology: version 8.5.4 only; version 8.5.5 only
• Oracle ZFS Storage Appliance Kit: version 8.8 only
• Siemens Sinec Infrastructure Network Services: before 1.0.1.1 (fixed in 1.0.1.1)
• Sqlite Sqlite: version 3.31.1 only

Published 2020-02-21. Last modified 2026-06-17.