Yüksek CVSS 7.5 PoC var

CVE-2020-11655: Sqlite: güvenlik açığı

Yayın: 9 Nisan 2020 06:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

Özet bilgiler

Ürün: Sqlite Sqlite
CVSS v3.1: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: %4,30 (yüzdelik 91)
CWE: CWE-665
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
sqlite-sqlite	—	3.31.1	—
netapp-ontap-select-deploy-administration-utility	—	—	—
debian-debian-linux	8.0	8.0	—
debian-debian-linux	9.0	9.0	—
canonical-ubuntu-linux	16.04	16.04	—
canonical-ubuntu-linux	18.04	18.04	—
canonical-ubuntu-linux	19.10	19.10	—
canonical-ubuntu-linux	20.04	20.04	—
oracle-communications-element-manager	8.2.0	8.2.2	—
oracle-communications-network-charging-and-control	12.0.0	12.0.3	—
oracle-communications-network-charging-and-control	6.0.1	6.0.1	—
oracle-communications-network-charging-and-control	12.0.2	12.0.2	—
oracle-communications-session-report-manager	8.2.0	8.2.2	—
oracle-communications-session-route-manager	8.2.0	8.2.2	—
oracle-enterprise-manager-ops-center	12.4.0.0	12.4.0.0	—
oracle-hyperion-infrastructure-technology	11.1.2.4	11.1.2.4	—
oracle-instantis-enterprisetrack	17.1	17.1	—
oracle-instantis-enterprisetrack	17.2	17.2	—
oracle-instantis-enterprisetrack	17.3	17.3	—
oracle-mysql	8.0.0	8.0.22	—
oracle-mysql-workbench	—	8.0.22	—
oracle-outside-in-technology	8.5.4	8.5.4	—
oracle-outside-in-technology	8.5.5	8.5.5	—
oracle-zfs-storage-appliance-kit	8.8	8.8	—
oracle-communications-messaging-server	8.1	8.1	—
siemens-sinec-infrastructure-network-services	—	—	1.0.1.1
tenable-tenable.sc	—	—	5.19.0

Kaynaklar

Uygulamada aç Tüm CVE kayıtları