Detections
Analytics
EulerOS 2.0 SP13 : sqlite (EulerOS-SA-2026-3001)
high Nessus Plugin ID 332797
Synopsis
The remote EulerOS host is missing multiple security updates.Description
According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.(CVE-2026-11824)
SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process crashes, memory exhaustion, or arbitrary code execution by supplying a crafted database with malformed FTS5 page data. Attackers can trigger an out-of-bounds read in fts5LeafSeek() via an attacker-controlled loop bound and a heap buffer overflow write in fts5ChunkIterate() through a crafted continuation page causing an integer underflow, exploitable when an FTS5 MATCH query is executed against the malicious database.(CVE-2026-11822)
Tenable has extracted the preceding description block directly from the EulerOS sqlite security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Update the affected sqlite packages.See Also
Plugin Details
Severity: High
ID: 332797
File Name: EulerOS_SA-2026-3001.nasl
Version: 1.1
Type: Local
Family: Huawei Local Security Checks
Published: 8/6/2026
Updated: 8/6/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 58.15
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-11824
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 8.5
Threat Score: 5.9
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
CPE: cpe:/o:huawei:euleros:2.0, p-cpe:/a:huawei:euleros:sqlite-devel, p-cpe:/a:huawei:euleros:sqlite-help, p-cpe:/a:huawei:euleros:sqlite
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/sp
Excluded KB Items: Host/EulerOS/uvp_version
Exploit Ease: No known exploits are available
Patch Publication Date: 8/6/2026
Vulnerability Publication Date: 6/9/2026
Reference Information
CVE: CVE-2026-11822, CVE-2026-11824
IAVA: 2026-A-0641-S