High · published April 9, 2020
SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.
| Product | Versions | Fixed in |
|---|---|---|
| sqlite/sqlite | ≤ 3.31.1 | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| oracle/communications_element_manager | ≥ 8.2.0, ≤ 8.2.2 | — |
| oracle/communications_network_charging_and_control | ≥ 12.0.0, ≤ 12.0.3 | — |
| oracle/communications_network_charging_and_control | all versions | — |
| oracle/communications_network_charging_and_control | all versions | — |
| oracle/communications_session_report_manager | ≥ 8.2.0, ≤ 8.2.2 | — |
| oracle/communications_session_route_manager | ≥ 8.2.0, ≤ 8.2.2 | — |
| oracle/enterprise_manager_ops_center | all versions | — |
| oracle/hyperion_infrastructure_technology | all versions | — |
| oracle/instantis_enterprisetrack | all versions | — |
| oracle/instantis_enterprisetrack | all versions | — |
| oracle/instantis_enterprisetrack | all versions | — |
| oracle/mysql | ≥ 8.0.0, ≤ 8.0.22 | — |
| oracle/mysql_workbench | ≤ 8.0.22 | — |
| oracle/outside_in_technology | all versions | — |
| oracle/outside_in_technology | all versions | — |
| oracle/zfs_storage_appliance_kit | all versions | — |
| oracle/communications_messaging_server | all versions | — |
| siemens/sinec_infrastructure_network_services | < 1.0.1.1 | 1.0.1.1 |
| tenable/tenable.sc | < 5.19.0 | 5.19.0 |