CVE-2020-11655

PoC —

CVSS 3.1

7.5 high

EPSS

4%p91

Published

Apr 9, 2020 (Apr 9, 2020)

Modified

Jun 17, 2026

Description

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

Vendors: sqlite netapp debian canonical oracle siemens tenable
Products: sqlite, ontap select deploy administration utility, debian linux, ubuntu linux, communications element manager, communications network charging and control, communications session report manager, communications session route manager, enterprise manager ops center, hyperion infrastructure technology, instantis enterprisetrack, mysql
Weakness: CWE-665
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news0 stories

No ingested article mentions this CVE yet.