SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) trigger so nodeWrite() hashes nodes as 0, crashing the process after node splits.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 84cd82e1-d49f-11f1-bae2-3497f65b111b advisory.

    VulnCheck reports:
    Ten vulnerabilities fixed in SQLite 3.54.0 were published on                 2026-10-30. Four of them corrupt the heap: buffer overflows in                 the FTS5 functions fts5MergeRowidLists() and                 fts5DoSecureDelete() and in the session extension                 sessionUpdateFind(), and a use-after-free in the R-Tree function                 nodeWrite(). A fifth, a use-after-free in the FTS3 function                 fts3BestSnippet(), is reached through snippet().
    The remaining five crash the process or leak data: unbounded                 recursion through a chain of common table expressions, through a                 chain of COLLATE operators and through countOfViewOptimization()                 in a VALUES clause, an information leak on a page size mismatch                 in the write-ahead log, and an authorizer bypass with RIGHT or                 FULL JOIN USING.
    An attacker has to supply a database file or SQL text, so the                 FTS5 and FTS3 issues apply wherever those options are built in;
                both are on by default in databases/sqlite3.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers     to make applications use freed heap memory by manipulating the %_node shadow table. Attackers can supply a     database declaring %_node WITHOUT ROWID or with a RAISE(IGNORE) trigger so nodeWrite() hashes nodes as 0,     crashing the process after node splits. (CVE-2026-119378)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
374537	FreeBSD : sqlite3 -- multiple vulnerabilities (84cd82e1-d49f-11f1-bae2-3497f65b111b)	Nessus	FreeBSD Local Security Checks	Local	high
374302	Linux Distros Unpatched Vulnerability : CVE-2026-119378	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-119378

medium

Tenable Plugins

high

medium