Wind River Support Network

HomeDefectsLIN9-9747
Fixed

LIN9-9747 : Security Advisory - sqlite3 - CVE-2020-11655

Created: Apr 9, 2020    Updated: Apr 25, 2020
Resolved Date: Apr 23, 2020
Found In Version: 9.0.0.1
Fix Version: 9.0.0.25
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

CREATE(Triage):(User=admin) [CVE-2020-11655|https://nvd.nist.gov/vuln/detail/CVE-2020-11655]

CVEs


Live chat
Online