The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7108 advisory.

  - In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
    (CVE-2020-35525)

  - In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a     nested FROM clause. (CVE-2020-35527)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
    (CVE-2020-35525)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3931:01 advisory.

    * sqlite: Out of bounds access during table rename (CVE-2020-35527)
      * sqlite: Null pointer derreference in src/select.c (CVE-2020-35525)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue was found in fts5UnicodeTokenize() in ext/fts5/fts5_tokenize.c in Sqlite. A unicode61 tokenizer     configured to treat unicode 'control-characters' (class Cc), was treating embedded nul characters as     tokens. The issue was fixed in sqlite-3.34.0 and later.(CVE-2021-20223)

    In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query     processing.(CVE-2020-35525)

    In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a     nested FROM clause.(CVE-2020-35527)

    SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes     are used in a string argument to a C API.(CVE-2022-35737)

Tenable has extracted the preceding description block directly from the EulerOS sqlite security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:7108 advisory.

  - In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
    (CVE-2020-35525)

  - In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a     nested FROM clause. (CVE-2020-35527)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0179 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2020-35525:
    In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.

    CVE-2020-13435:
    SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.

    CVE-2020-15358:
    In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy     heap overflow because of misuse of transitive properties for constant propagation.

    CVE-2020-35527:
    In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a     nested FROM clause.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3107 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3107-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     September 13, 2022                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : sqlite3     Version        : 3.27.2-3+deb10u2     CVE IDs        : CVE-2020-35525 CVE-2020-35527 CVE-2021-20223

    It was discovered that there were three issues in SQLite:

    * CVE-2020-35525: Prevent a potential null pointer deference issue in       INTERSEC query processing.

    * CVE-2020-35527: Prevent an out-of-bounds access issue that could be       exploited via ALTER TABLE in views that have a nested FROM clauses.

    * CVE-2021-20223: Prevent an issue with the unicode61 tokenizer       related to Unicode control characters (class Cc) and embedded NUL       characters being misinterpreted as tokens.


    For Debian 10 buster, these problems have been fixed in version     3.27.2-3+deb10u2.

    We recommend that you upgrade your sqlite3 packages.

    For the detailed security status of sqlite3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/sqlite3

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
    (CVE-2020-35525)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
184900	Rocky Linux 8 : sqlite (RLSA-2022:7108)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/7	critical
188627	EulerOS Virtualization 3.0.6.0 : sqlite (EulerOS-SA-2023-3456)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
293610	MiracleLinux 8 : sqlite-3.26.0-16.el8 (AXSA:2022-3931:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
167354	EulerOS 2.0 SP9 : sqlite (EulerOS-SA-2022-2779)	Nessus	Huawei Local Security Checks	2022/11/14	2025/10/28	critical
166673	AlmaLinux 8 : sqlite (ALSA-2022:7108)	Nessus	Alma Linux Local Security Checks	2022/10/28	2022/11/28	critical
236450	Alibaba Cloud Linux 3 : 0179: sqlite (ALINUX3-SA-2022:0179)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
164992	Debian dla-3107 : lemon - security update	Nessus	Debian Local Security Checks	2022/9/13	2025/9/24	critical
178853	EulerOS Virtualization 3.0.6.6 : sqlite (EulerOS-SA-2023-2437)	Nessus	Huawei Local Security Checks	2023/7/26	2023/7/26	high
188410	EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2023-3160)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high

検出

プラグインの検索

critical

high

critical

critical

critical

critical

critical

high

high