A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.

A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally allowed to execute commands). This report does NOT imply any problem in the SQLite library.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3907 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3907-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     September 30, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : sqlite3     Version        : 3.34.1-3+deb11u1     CVE ID         : CVE-2021-36690 CVE-2023-7104

    Two vulnerabilities have been fixed in the SQLite database.

    CVE-2021-36690

        Expert extension segfault

    CVE-2023-7104

        Session extension buffer overread

    For Debian 11 bullseye, these problems have been fixed in version     3.34.1-3+deb11u1.

    We recommend that you upgrade your sqlite3 packages.

    For the detailed security status of sqlite3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/sqlite3

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3307-2 advisory.

  - ** DISPUTED ** A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0     via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the     relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally     allowed to execute commands). This report does NOT imply any problem in the SQLite library.
    (CVE-2021-36690)

  - SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes     are used in a string argument to a C API. (CVE-2022-35737)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3401-1 advisory.

  - ** DISPUTED ** A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0     via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the     relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally     allowed to execute commands). This report does NOT imply any problem in the SQLite library.
    (CVE-2021-36690)

  - SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes     are used in a string argument to a C API. (CVE-2022-35737)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3307-1 advisory.

  - ** DISPUTED ** A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0     via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the     relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally     allowed to execute commands). This report does NOT imply any problem in the SQLite library.
    (CVE-2021-36690)

  - SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes     are used in a string argument to a C API. (CVE-2022-35737)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 16. It is, therefore, affected by multiple vulnerabilities.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA69705 advisory.

  - ** DISPUTED ** A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0     via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the     relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally     allowed to execute commands). This report does NOT imply any problem in the SQLite library.
    (CVE-2021-36690)

  - A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who     is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible     code execution by triggering a use-after-free. The highest threat from this vulnerability is to system     availability. (CVE-2021-20227)

  - In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy     heap overflow because of misuse of transitive properties for constant propagation. (CVE-2020-15358)

  - SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for     window functions is too late. (CVE-2020-13871)

  - ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo()     query. (CVE-2020-13632)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5403-1 advisory.

    It was discovered that SQLite command-line component incorrectly handled certain queries. An attacker     could possibly use this issue to cause a crash or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0     via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the     relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally     allowed to execute commands). This report does NOT imply any problem in the SQLite library.
    (CVE-2021-36690)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0     via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the     relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally     allowed to execute commands). This report does NOT imply any problem in the SQLite library.
    (CVE-2021-36690)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0     via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the     relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally     allowed to execute commands). This report does NOT imply any problem in the SQLite library.
    (CVE-2021-36690)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0     via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the     relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally     allowed to execute commands). This report does NOT imply any problem in the SQLite library.
    (CVE-2021-36690)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
504211	Siemens SIMATIC S7-1500 Missing Encryption of Sensitive Data (CVE-2021-36690)	Tenable OT Security	Tenable.ot	high
207951	Debian dla-3907 : lemon - security update	Nessus	Debian Local Security Checks	high
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	critical
166943	SUSE SLES15 Security Update : sqlite3 (SUSE-SU-2022:3307-2)	Nessus	SuSE Local Security Checks	high
165481	SUSE SLES12 Security Update : sqlite3 (SUSE-SU-2022:3401-1)	Nessus	SuSE Local Security Checks	high
165250	SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2022:3307-1)	Nessus	SuSE Local Security Checks	high
165105	Apple iOS < 16 Multiple Vulnerabilities (HT213446)	Nessus	Mobile Devices	critical
163770	Juniper Junos OS Multiple Vulnerabilities (JSA69705)	Nessus	Junos Local Security Checks	critical
160538	Ubuntu 18.04 LTS / 20.04 LTS : SQLite vulnerability (USN-5403-1)	Nessus	Ubuntu Local Security Checks	high
158003	EulerOS Virtualization 3.0.6.0 : sqlite (EulerOS-SA-2022-1095)	Nessus	Huawei Local Security Checks	high
155527	EulerOS Virtualization 2.9.0 : sqlite (EulerOS-SA-2021-2773)	Nessus	Huawei Local Security Checks	high
155516	EulerOS Virtualization 2.9.1 : sqlite (EulerOS-SA-2021-2740)	Nessus	Huawei Local Security Checks	high
155253	EulerOS 2.0 SP9 : sqlite (EulerOS-SA-2021-2722)	Nessus	Huawei Local Security Checks	high
155120	EulerOS 2.0 SP9 : sqlite (EulerOS-SA-2021-2697)	Nessus	Huawei Local Security Checks	high
154802	EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2021-2644)	Nessus	Huawei Local Security Checks	high

Detections

Analytics

CVE-2021-36690

high

Tenable Plugins

high

high

critical

high

high

high

critical

critical

high

high

high

high

high

high

high