PT-2020-2204

CVE-2020-11656

·

Published

2020-04-09

·

Updated

2026-10-14

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions SQLite versions 3.31.1 and earlier
Description The issue is related to a use-after-free in the ALTER TABLE implementation, which can be demonstrated by an ORDER BY clause belonging to a compound SELECT statement. This could potentially allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations For SQLite versions 3.31.1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2020-2004
ALT-PU-2020-2898
ALT-PU-2021-1338
ALT-PU-2021-1906
ALT-PU-2021-2380
ALT-PU-2021-2382
ALT-PU-2021-3668
ALT-PU-2021-3670
AZL-38947
BIT-SQLITE-2020-11656
Found an issue in the description? Have something to add? Feel free to write us 👾