EXPOSURES › CVE-2020-11656
CVE-2020-11656
CRITICAL
DETAIL
SourceNVD · cve
Published2020-04-09
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2020-11656 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
NetApp · vendorOracle · vendorSiemens · vendorsqlite · vendortenable · vendorcommunications messaging server · productcommunications network charging and control · productenterprise manager ops center · producthyperion infrastructure technology · productmysql · productmysql workbench · productontap select deploy administration utility · productoutside in technology · productsinec infrastructure network services · productsqlite · producttenable.sc · productzfs storage appliance kit · product
DESCRIPTION
In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
AFFECTED FEDRAMP PRODUCTS · 13
| PRODUCT | STATUS |
|---|---|
| Aconex for Defense Oracle |
Authorized |
| Cloud Insights NetApp |
In Process |
| Federal Managed Cloud Services Oracle |
Authorized |
| Fusion Cloud Oracle |
Authorized |
| Government Cloud - Common Controls Oracle |
Authorized |
| Mendix Cloud for Government Siemens Government Technologies |
In Process |
| Oracle Cloud Infrastructure-Government Cloud Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) - Moderate Oracle |
In Process |
| Oracle Service Cloud Oracle |
Authorized |
| Oracle Service Cloud (DOD) Oracle |
Authorized |
| Taleo Cloud - U.S. Government Cloud Oracle |
Authorized |
| Tenable.io Tenable Public Sector (TPS) |
Authorized |