The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0288 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-29088:
    An issue in sqlite v.3.49.0 allows an attacker to cause a denial of service via the     SQLITE_DBCONFIG_LOOKASIDE component

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1455-1 advisory.

    - CVE-2025-3277,CVE-2025-29087: Fixed integer overflow in sqlite concat function (bsc#1241020)
    - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078)

    Other fixes:

    - Updated to version 3.49.1 from Factory (jsc#SLE-16032)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01456-2 advisory.

    - CVE-2025-29087,CVE-2025-3277: Fixed integer overflow in sqlite concat function (bsc#1241020)
    - CVE-2025-29088: Fixed integer overflow through the SQLITE_DBCONFIG_LOOKASIDE component (bsc#1241078)

    Other fixes:

    - Updated to version 3.49.1 from Factory (jsc#SLE-16032)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7679-1 advisory.

    It was discovered that SQLite incorrectly handled aggregate terms. An attacker could use this issue to     cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
    (CVE-2025-6965)

    It was discovered that SQLite incorrectly handled certain argument values to sqlite3_db_config(). An     attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly     execute arbitrary code. This update fixes the issue in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu     18.04 LTS. This issue was previously fixed in Ubuntu 20.04 LTS via USN-7528-1. (CVE-2025-29088)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can     cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer,     and consequently some memory allocations may be incorrect.(CVE-2025-29088)

    There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could     exceed the number of columns available. This could lead to a memory corruption issue. We recommend     upgrading to version 3.50.2 or above.(CVE-2025-6965)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization sqlite security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-976 advisory.

    An issue in sqlite v.3.49.0 allows an attacker to cause a denial of service via the     SQLITE_DBCONFIG_LOOKASIDE component (CVE-2025-29088)

    A process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, which     could allow content to execute in the top-level document's process instead of the intended frame,     potentially enabling a sandbox escape. This vulnerability affects Firefox < 138, Firefox ESR < 128.10,     Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird ESR < 128.10. (CVE-2025-4083)

    A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to     missing null checks during attribute access. This could lead to out-of-bounds read access and potentially,     memory corruption. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Thunderbird < 138, and     Thunderbird < 128.10. (CVE-2025-4087)

    Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some     of these bugs showed evidence of memory corruption and we presume that with enough effort some of these     could have been exploited to run arbitrary code. This vulnerability affects Firefox < 138, Firefox ESR <     128.10, Thunderbird < 138, and Thunderbird < 128.10. (CVE-2025-4091)

    Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory     corruption and we presume that with enough effort this could have been exploited to run arbitrary code.
    This vulnerability affects Firefox ESR < 128.10 and Thunderbird < 128.10. (CVE-2025-4093)

    Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote attacker to cause a denial of     service via the setupLookaside function (CVE-2025-52099)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
276151	TencentOS Server 4: sqlite (TSSA-2025:0288)	Nessus	Tencent Local Security Checks	2025/11/20	2025/11/20	medium
235650	SUSE SLES12 Security Update : sqlite3 (SUSE-SU-2025:1455-1)	Nessus	SuSE Local Security Checks	2025/5/9	2026/1/21	medium
240892	SUSE SLES15 Security Update : sqlite3 (SUSE-SU-2025:01456-2)	Nessus	SuSE Local Security Checks	2025/6/28	2026/1/21	medium
243224	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : SQLite vulnerabilities (USN-7679-1)	Nessus	Ubuntu Local Security Checks	2025/7/31	2026/1/21	high
281634	EulerOS Virtualization 2.10.1 : sqlite (EulerOS-SA-2026-1006)	Nessus	Huawei Local Security Checks	2026/1/3	2026/1/3	high
302546	EulerOS Virtualization 2.12.1 : sqlite (EulerOS-SA-2026-1463)	Nessus	Huawei Local Security Checks	2026/3/16	2026/4/14	high
302632	EulerOS Virtualization 2.12.0 : sqlite (EulerOS-SA-2026-1520)	Nessus	Huawei Local Security Checks	2026/3/16	2026/4/14	high
237666	Amazon Linux 2023 : firefox (ALAS2023-2025-976)	Nessus	Amazon Linux Local Security Checks	2025/6/2	2025/12/9	medium

检测

插件搜索

medium

medium

medium

high

high

high

high

medium