FreeBSD : sqlite -- multiple vulnerabilities (dec3164f-3121-45ef-af18-bb113ac5082f)

high Nessus Plugin ID 82893

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

NVD reports :

SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted COLLATE clause, as demonstrated by COLLATE'''''''' at the end of a SELECT statement.

The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via a crafted CHECK clause, as demonstrated by CHECK(0&O>O) in a CREATE TABLE statement.

The sqlite3VXPrintf function in printf.c in SQLite before 3.8.9 does not properly handle precision and width values during floating-point conversions, which allows context-dependent attackers to cause a denial of service (integer overflow and stack-based buffer overflow) or possibly have unspecified other impact via large integers in a crafted printf function call in a SELECT statement.

Solution

Update the affected package.

See Also

https://www.sqlite.org/src/info/eddc05e7bb31fae7

https://www.sqlite.org/src/info/02e3c88fbf6abdcf

https://www.sqlite.org/src/info/c494171f77dc2e5e

https://seclists.org/fulldisclosure/2015/Apr/31

http://www.nessus.org/u?972e9809

Plugin Details

Severity: High

ID: 82893

File Name: freebsd_pkg_dec3164f312145efaf18bb113ac5082f.nasl

Version: 1.8

Type: local

Published: 4/20/2015

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:sqlite3

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 4/18/2015

Vulnerability Publication Date: 4/14/2015

Reference Information

CVE: CVE-2015-3414, CVE-2015-3415, CVE-2015-3416