This update for sqlite3 to version 3.27.2 fixes the following issue :

Security issue fixed :

CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 (Magellan) (bsc#1119687).

Release notes: https://www.sqlite.org/releaselog/3_27_2.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4019-1 advisory.

    It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this     issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS.
    (CVE-2017-2518, CVE-2017-2520)

    It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this     issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10.
    (CVE-2018-20505)

    It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this     issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu     18.10. (CVE-2018-20346, CVE-2018-20506)

    It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this     issue to access sensitive information. (CVE-2019-8457)

    It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this     issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and     Ubuntu 18.10. (CVE-2019-9936)

    It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this     issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04     LTS and Ubuntu 18.10. (CVE-2019-9937)

    It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this     issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-6153)

    It was discovered that SQLite incorrectly handled certain databases. An attacker could possibly use this     issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-10989)

    It was discovered that SQLite incorrectly handled certain files. An attacker could possibly use this issue     to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-13685)

    It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this     issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS.
    (CVE-2017-2519)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the version of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Multiple flaws were found in sqlite. An attacker having     the ability to run arbitrary SQL commands could use     this flaw to execute arbitrary code with the permission     of the user running the sqlite     application.(CVE-2018-20346)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for sqlite3 fixes the following issue :

Security issue fixed :

CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 (Magellan) (bsc#1119687).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
123499	SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2019:0788-1)	Nessus	SuSE Local Security Checks	2019/3/29	2025/3/12	high
126065	Ubuntu 16.04 LTS / 18.04 LTS : SQLite vulnerabilities (USN-4019-1)	Nessus	Ubuntu Local Security Checks	2019/6/20	2025/9/3	critical
123119	EulerOS 2.0 SP3 : sqlite (EulerOS-SA-2019-1106)	Nessus	Huawei Local Security Checks	2019/3/26	2025/3/13	high
123639	SUSE SLES11 Security Update : sqlite3 (SUSE-SU-2019:14003-1)	Nessus	SuSE Local Security Checks	2019/4/2	2025/3/12	high

检测

插件搜索

high

critical

high

high