The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4394-1 advisory.

    It was discovered that SQLite incorrectly handled certain corruped schemas. An attacker could possibly use     this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-8740)

    It was discovered that SQLite incorrectly handled certain SELECT statements. An attacker could possibly     use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10.
    (CVE-2019-19603)

    It was discovered that SQLite incorrectly handled certain self-referential views. An attacker could     possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10.
    (CVE-2019-19645)

    Henry Liu discovered that SQLite incorrectly handled certain malformed window-function queries. An     attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 19.10     and Ubuntu 20.04 LTS. (CVE-2020-11655)

    It was discovered that SQLite incorrectly handled certain string operations. An attacker could use this     issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2020-13434)

    It was discovered that SQLite incorrectly handled certain expressions. An attacker could use this issue to     cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue     only affected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-13435)

    It was discovered that SQLite incorrectly handled certain fts3 queries. An attacker could use this issue     to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2020-13630)

    It was discovered that SQLite incorrectly handled certain virtual table names. An attacker could possibly     use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10 and Ubuntu     20.04 LTS. (CVE-2020-13631)

    It was discovered that SQLite incorrectly handled certain fts3 queries. An attacker could use this issue     to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2020-13632)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4396 advisory.

  - sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces (CVE-2019-5827)

  - sqlite: dropping of shadow tables not restricted in defensive mode (CVE-2019-13750)

  - sqlite: fts3: improve detection of corrupted records (CVE-2019-13751)

  - sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS (CVE-2019-19603)

  - sqlite: NULL pointer dereference in sqlite3ExprCodeTarget() (CVE-2020-13435)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - sqlite: heap out-of-bound read in function rtreenode() (CVE-2019-8457)

  - The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows     remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL     command that triggers an API call with a crafted pointer value in the second argument. (CVE-2015-7036)

  - os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which     might allow local users to obtain sensitive information, cause a denial of service (application crash), or     have unspecified other impact by leveraging use of the current working directory for temporary files.
    (CVE-2016-6153)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is running a version of macOS / Mac OS X that is 11.0.x prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities, including the following:

  - An out-of-bounds write issue that can lead to unexpected application termination or arbitrary code     execution when opening a maliciously crafted PDF file. (CVE-2020-9876)

  - An out-of-bounds write caused by insufficient input validation that can lead to arbitrary code execution     when processing a maliciously crafted image. (CVE-2020-9883)

  - A remote attacker may be able to unexpectedly alter the Mail application date due to insufficient checks.
    (CVE-2020-9941)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

An update of the sqlite package has been released.

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In SQLite before 3.32.3, select.c mishandles     query-flattener optimization, leading to a     multiSelectOrderBy heap overflow because of misuse of     transitive properties for constant     propagation.(CVE-2020-15358)

  - SQLite through 3.32.0 has a segmentation fault in     sqlite3ExprCodeTarget in expr.c.(CVE-2020-13435)

  - SQLite through 3.32.0 has an integer overflow in     sqlite3_str_vappendf in printf.c.(CVE-2020-13434)

  - ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a     NULL pointer dereference via a crafted matchinfo()     query.(CVE-2020-13632)

  - ext/fts3/fts3.c in SQLite before 3.32.0 has a     use-after-free in fts3EvalNextRow, related to the     snippet feature.(CVE-2020-13630)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

sqlite3 update :

Various security issues could be used by an attacker to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.

- CVE-2020-11655: SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

- CVE-2020-13434: SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

- CVE-2020-13435: SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.

- CVE-2020-13630: ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

- CVE-2020-13631: SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.

- CVE-2020-13632: ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

Rebase to version 3.32.1

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1058-1 advisory.

  - SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows     context-dependent attackers to cause a denial of service (uninitialized memory access and application     crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by     COLLATE at the end of a SELECT statement. (CVE-2015-3414)

  - The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison     operators, which allows context-dependent attackers to cause a denial of service (invalid free operation)     or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O;>O) in a     CREATE TABLE statement. (CVE-2015-3415)

  - sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window     functions, and also has certain ORDER BY usage. (CVE-2019-19244)

  - lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated     column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
    (CVE-2019-19317)

  - SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application     crash. (CVE-2019-19603)

  - alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-     referential views in conjunction with ALTER TABLE statements. (CVE-2019-19645)

  - pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain     cases of generated columns. (CVE-2019-19646)

  - exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference     because constant integer values in ORDER BY clauses of window definitions are mishandled. (CVE-2019-19880)

  - flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT     JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect     results). (CVE-2019-19923)

  - SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This     is caused by incorrect sqlite3WindowRewrite() error handling. (CVE-2019-19924)

  - zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP     archive. (CVE-2019-19925)

  - multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by     errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for     CVE-2019-19880. (CVE-2019-19926)

  - ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving     embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for     example) valgrind. (CVE-2019-19959)

  - selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.
    (CVE-2019-20218)

  - SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. (CVE-2020-13434)

  - SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. (CVE-2020-13435)

  - ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet     feature. (CVE-2020-13630)

  - SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related     to alter.c and build.c. (CVE-2020-13631)

  - ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo()     query. (CVE-2020-13632)

  - In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy     heap overflow because of misuse of transitive properties for constant propagation. (CVE-2020-15358)

  - In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and     segmentation fault because of generated column optimizations. (CVE-2020-9327)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
137353	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : SQLite vulnerabilities (USN-4394-1)	Nessus	Ubuntu Local Security Checks	2020/6/11	2024/8/27	high
155211	RHEL 8 : sqlite (RHSA-2021:4396)	Nessus	Red Hat Local Security Checks	2021/11/11	2024/4/28	high
199469	RHEL 7 : sqlite (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
143115	macOS 11.0.x < 11.0.1	Nessus	MacOS X Local Security Checks	2020/11/19	2024/5/28	high
137188	Photon OS 3.0: Sqlite PHSA-2020-3.0-0101	Nessus	PhotonOS Local Security Checks	2020/6/6	2024/7/24	high
137193	Photon OS 2.0: Sqlite PHSA-2020-2.0-0249	Nessus	PhotonOS Local Security Checks	2020/6/6	2024/7/23	high
137322	Photon OS 1.0: Sqlite PHSA-2020-1.0-0298	Nessus	PhotonOS Local Security Checks	2020/6/10	2024/3/7	high
139157	EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1827)	Nessus	Huawei Local Security Checks	2020/7/30	2024/2/27	high
137439	FreeBSD : several security issues in sqlite3 (c4ac9c79-ab37-11ea-8b5e-b42e99a1b9c3)	Nessus	FreeBSD Local Security Checks	2020/6/17	2024/3/7	high
137102	Fedora 32 : sqlite (2020-0477f8840e)	Nessus	Fedora Local Security Checks	2020/6/4	2024/3/8	high
151816	openSUSE 15 Security Update : sqlite3 (openSUSE-SU-2021:1058-1)	Nessus	SuSE Local Security Checks	2021/7/20	2023/12/7	critical

検出

プラグインの検索

high

high

critical

high

high

high

high

high

high

high

critical