An update of the sqlite package has been released.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4396 advisory.

    SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A     complete database is stored in a single disk file. The API is designed for convenience and ease of use.
    Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the     administrative hassles of supporting a separate database server.

    Security Fix(es):

    * sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces (CVE-2019-5827)

    * sqlite: dropping of shadow tables not restricted in defensive mode (CVE-2019-13750)

    * sqlite: fts3: improve detection of corrupted records (CVE-2019-13751)

    * sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS (CVE-2019-19603)

    * sqlite: NULL pointer dereference in sqlite3ExprCodeTarget() (CVE-2020-13435)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4396 advisory.

  - Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2019-5827)

  - Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to     bypass defense-in-depth measures via a crafted HTML page. (CVE-2019-13750)

  - Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted HTML page. (CVE-2019-13751)

  - SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application     crash. (CVE-2019-19603)

  - SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. (CVE-2020-13435)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2320-1 advisory.

    - Update to version 3.36.0
    - CVE-2020-15358: heap-based buffer overflow in multiSelectOrderBy due to mishandling of query-flattener       optimization (bsc#1173641)
    - CVE-2020-9327: NULL pointer dereference and segmentation fault because of generated column optimizations     in       isAuxiliaryVtabOperator (bsc#1164719)
    - CVE-2019-20218: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error     (bsc#1160439)
    - CVE-2019-19959: memory-management error via ext/misc/zipfile.c involving embedded '\0' input     (bsc#1160438)
    - CVE-2019-19923: improper handling  of  certain uses of SELECT DISTINCT in flattenSubquery may lead to     null pointer       dereference (bsc#1160309)
    - CVE-2019-19924: improper error handling in sqlite3WindowRewrite() (bsc#1159850)
    - CVE-2019-19925: improper handling of NULL pathname during an update of a ZIP archive (bsc#1159847)
    - CVE-2019-19926: improper handling  of certain errors during parsing  multiSelect in select.c     (bsc#1159715)
    - CVE-2019-19880: exprListAppendList in window.c allows attackers to trigger an invalid pointer     dereference       (bsc#1159491)
    - CVE-2019-19603: during handling of CREATE TABLE and CREATE VIEW statements, does not consider confusion     with       a shadow table name (bsc#1158960)
    - CVE-2019-19646: pragma.c mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of     generated       columns (bsc#1158959)
    - CVE-2019-19645: alter.c allows attackers to trigger infinite recursion via certain types of self-     referential views       in conjunction with ALTER TABLE statements (bsc#1158958)
    - CVE-2019-19317: lookupName in resolve.c omits bits from the colUsed bitmask in the case of a generated     column,       which allows attackers to cause a denial of service (bsc#1158812)
    - CVE-2019-19244: sqlite3,sqlite2,sqlite: The function sqlite3Select in select.c allows a crash if a       sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage (bsc#1157818)
    - CVE-2015-3415: sqlite3VdbeExec comparison operator vulnerability (bsc#928701)
    - CVE-2015-3414: sqlite3,sqlite2: dequoting of collation-sequence names (bsc#928700)
    - CVE-2020-13434: integer overflow in sqlite3_str_vappendf (bsc#1172115)
    - CVE-2020-13630: (bsc#1172234: use-after-free in fts3EvalNextRow
    - CVE-2020-13631: virtual table allowed to be renamed to one of its shadow tables (bsc#1172236)
    - CVE-2020-13632: NULL pointer dereference via crafted matchinfo() query (bsc#1172240)
    - CVE-2020-13435: Malicious SQL statements could have crashed the process that is running SQLite     (bsc#1172091)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1058-1 advisory.

  - SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows     context-dependent attackers to cause a denial of service (uninitialized memory access and application     crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by     COLLATE at the end of a SELECT statement. (CVE-2015-3414)

  - The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison     operators, which allows context-dependent attackers to cause a denial of service (invalid free operation)     or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O;>O) in a     CREATE TABLE statement. (CVE-2015-3415)

  - sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window     functions, and also has certain ORDER BY usage. (CVE-2019-19244)

  - lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated     column, which allows attackers to cause a denial of service or possibly have unspecified other impact.
    (CVE-2019-19317)

  - SQLite 3.30.1 mishandles certain SELECT statements with a nonexistent VIEW, leading to an application     crash. (CVE-2019-19603)

  - alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-     referential views in conjunction with ALTER TABLE statements. (CVE-2019-19645)

  - pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain     cases of generated columns. (CVE-2019-19646)

  - exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference     because constant integer values in ORDER BY clauses of window definitions are mishandled. (CVE-2019-19880)

  - flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT     JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect     results). (CVE-2019-19923)

  - SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This     is caused by incorrect sqlite3WindowRewrite() error handling. (CVE-2019-19924)

  - zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP     archive. (CVE-2019-19925)

  - multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by     errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for     CVE-2019-19880. (CVE-2019-19926)

  - ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving     embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for     example) valgrind. (CVE-2019-19959)

  - selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.
    (CVE-2019-20218)

  - SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. (CVE-2020-13434)

  - SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. (CVE-2020-13435)

  - ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet     feature. (CVE-2020-13630)

  - SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related     to alter.c and build.c. (CVE-2020-13631)

  - ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo()     query. (CVE-2020-13632)

  - In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy     heap overflow because of misuse of transitive properties for constant propagation. (CVE-2020-15358)

  - In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and     segmentation fault because of generated column optimizations. (CVE-2020-9327)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4394-1 advisory.

    It was discovered that SQLite incorrectly handled certain corruped schemas. An attacker could possibly use     this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-8740)

    It was discovered that SQLite incorrectly handled certain SELECT statements. An attacker could possibly     use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10.
    (CVE-2019-19603)

    It was discovered that SQLite incorrectly handled certain self-referential views. An attacker could     possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10.
    (CVE-2019-19645)

    Henry Liu discovered that SQLite incorrectly handled certain malformed window-function queries. An     attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 19.10     and Ubuntu 20.04 LTS. (CVE-2020-11655)

    It was discovered that SQLite incorrectly handled certain string operations. An attacker could use this     issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2020-13434)

    It was discovered that SQLite incorrectly handled certain expressions. An attacker could use this issue to     cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue     only affected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-13435)

    It was discovered that SQLite incorrectly handled certain fts3 queries. An attacker could use this issue     to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2020-13630)

    It was discovered that SQLite incorrectly handled certain virtual table names. An attacker could possibly     use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10 and Ubuntu     20.04 LTS. (CVE-2020-13631)

    It was discovered that SQLite incorrectly handled certain fts3 queries. An attacker could use this issue     to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2020-13632)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
132984	Photon OS 1.0: Sqlite PHSA-2020-1.0-0264	Nessus	PhotonOS Local Security Checks	2020/1/16	2024/3/29	critical
155211	RHEL 8 : sqlite (RHSA-2021:4396)	Nessus	Red Hat Local Security Checks	2021/11/11	2024/11/7	high
157628	AlmaLinux 8 : sqlite (ALSA-2021:4396)	Nessus	Alma Linux Local Security Checks	2022/2/9	2023/11/10	high
151654	SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2021:2320-1)	Nessus	SuSE Local Security Checks	2021/7/15	2026/6/25	critical
151816	openSUSE 15 Security Update : sqlite3 (openSUSE-SU-2021:1058-1)	Nessus	SuSE Local Security Checks	2021/7/20	2023/12/7	critical
132978	Photon OS 2.0: Sqlite PHSA-2019-2.0-0198	Nessus	PhotonOS Local Security Checks	2020/1/16	2024/7/22	critical
137353	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : SQLite vulnerabilities (USN-4394-1)	Nessus	Ubuntu Local Security Checks	2020/6/11	2025/9/3	high
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	2023/6/30	2023/7/6	critical

检测

插件搜索

critical

high

high

critical

critical

critical

high

critical