SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider     certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
    (CVE-2017-15286)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider
    certain cases where `sqlite3_step(pStmt)==SQLITE_ROW` is false and a data structure is never initialized.
    (CVE-2017-15286)

Security fix for CVE-2017-13685 CVE-2017-15286

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
220648	Linux Distros Unpatched Vulnerability : CVE-2017-15286	Nessus	Misc.	high
407201	Alpine: sqlite: security update to 3.20.1-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	high
407201	Alpine: sqlite: security update to 3.20.1-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
110401	Fedora 27 : sqlite (2018-8d8f0e1643)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2017-15286

high

Tenable Plugins

high

high

high

high