CVE-2020-11655

HighCVSS 7.5/10Last modified Oct 14, 2026

Description

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-665

Affected software

VendorProductVersions
n/an/an/a
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5

References

Timeline

Published
Apr 9, 2020
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-116569.8In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compoCVE-2020-116589.8CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.CVE-2020-116594.3CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administCVE-2020-11667.8An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service. An attacker who successfully explCVE-2020-116606.5CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive informatCVE-2020-116618.1CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.CVE-2020-116627.5CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource SharCVE-2020-116636.1CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attackCVE-2020-116646.1CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open CVE-2020-116656.1CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform openCVE-2020-116668.8CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.CVE-2020-116687.1In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors,
CVE-2020-11655: High severity, CVSS 7.5 | Vulnix