Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-11656
HistoryApr 09, 2020 - 3:15 a.m.

CVE-2020-11656

2020-04-0903:15:11
CWE-416
[email protected]
web.nvd.nist.gov
151
5
sqlite
cve-2020-11656
alter table
use-after-free
order by
compound select statement

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.3%

JSON

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

Affected configurations

NVD
Node
sqlitesqliteRange≤3.31.1
Node
netappontap_select_deploy_administration_utilityMatch-
Node
oraclecommunications_network_charging_and_controlRange12.0.0–12.0.3
OR
oraclecommunications_network_charging_and_controlMatch6.0.1
OR
oraclecommunications_network_charging_and_controlMatch12.0.2
OR
oracleenterprise_manager_ops_centerMatch12.4.0.0
OR
oraclehyperion_infrastructure_technologyMatch11.1.2.4
OR
oraclemysqlRange8.0.0–8.0.22
OR
oraclemysql_workbenchRange≤8.0.22
OR
oracleoutside_in_technologyMatch8.5.4
OR
oracleoutside_in_technologyMatch8.5.5
OR
oraclezfs_storage_appliance_kitMatch8.8
OR
oraclecommunications_messaging_serverMatch8.1
Node
siemenssinec_infrastructure_network_servicesRange<1.0.1.1
Node
tenabletenable.scRange≤5.19.0
CPENameOperatorVersion
sqlite:sqlitesqlitele3.31.1

Social References

More

Related

sqlite 1
nvd 1
osv 1
redhatcve 1
prion 1
cbl_mariner 1
alpinelinux 1
debiancve 1
ubuntucve 1
cvelist 1
nessus 13
ibm 6
photon 8
freebsd_advisory 1
gentoo 1
rosalinux 1
ics 2
tenable 1
openvas 1
oracle 4
sqlite
sqlite
SQLite report about CVE-2020-11656
2020-01-01 00:00:00
nvd
nvd
CVE-2020-11656
2020-04-09 03:15:11
osv
osv
BIT-sqlite-2020-11656
2024-03-06 11:08:29
redhatcve
redhatcve
CVE-2020-11656
2020-04-15 14:03:34
prion
prion
Design/Logic Flaw
2020-04-09 03:15:00
cbl_mariner
cbl_mariner
CVE-2020-11656 affecting package ceph for versions less than 18.2.1-1
2024-04-17 22:02:46
alpinelinux
alpinelinux
CVE-2020-11656
2020-04-09 03:15:00
debiancve
debiancve
CVE-2020-11656
2020-04-09 03:15:11
ubuntucve
ubuntucve
CVE-2020-11656
2020-04-09 00:00:00
cvelist
cvelist
CVE-2020-11656
2020-04-09 02:49:18
nessus
nessus
Photon OS 3.0: Sqlite PHSA-2020-3.0-0081
2020-04-21 00:00:00
Photon OS 2.0: Sqlite PHSA-2020-2.0-0231
2020-04-22 00:00:00
Photon OS 1.0: Sqlite PHSA-2020-1.0-0289
2020-04-28 00:00:00
ibm
ibm
Security Bulletin: Addressing the Sqlite Vulnerability CVE-2020-11656, CVE-2020-11655
2020-07-17 15:48:16
Security Bulletin: A vulneraqbility in SQLite affects IBM Cloud Application Performance Managment R esponse Time Monitoring Agent (CVE-2020-11655, CVE-2020-11656)
2020-08-12 02:39:13
Security Bulletin: A security vulnerability has been identified in SQLite shipped with IBM Watson Machine Learning Community Edition (WMLCE)
2020-05-20 00:38:15
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0231
2020-04-17 00:00:00
Critical Photon OS Security Update - PHSA-2020-0231
2020-04-17 00:00:00
Critical Photon OS Security Update - PHSA-2020-0081
2020-04-15 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-20:22.sqlite
2020-08-05 00:00:00
gentoo
gentoo
SQLite: Multiple vulnerabilities
2020-07-27 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1975
2021-07-02 18:09:04
ics
ics
Siemens SINEC INS
2022-03-10 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47
openvas
openvas
Tenable Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)
2023-07-04 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.1 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.3%

JSON
Related for CVE-2020-11656
sqlite1nvd1osv1redhatcve1prion1cbl_mariner1alpinelinux1debiancve1ubuntucve1cvelist1nessus13ibm6photon8freebsd_advisory1gentoo1rosalinux1ics2tenable1openvas1oracle4