Scientific Linux Security Update : sqlite on SL6.x i386/x86_64

High Nessus Plugin ID 85501

Synopsis

The remote Scientific Linux host is missing one or more security updates.

Description

It was found that SQLite's sqlite3VXPrintf() function did not properly handle precision and width values during floating-point conversions. A local attacker could submit a specially crafted SELECT statement that would crash the SQLite process, or have other unspecified impacts.
(CVE-2015-3416)

Solution

Update the affected packages.

See Also

http://www.nessus.org/u?7dd6baa3

Plugin Details

Severity: High

ID: 85501

File Name: sl_20150817_sqlite_on_SL6_x.nasl

Version: 2.4

Type: local

Agent: unix

Published: 2015/08/18

Updated: 2018/12/28

Dependencies: 12634

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2015/08/17

Reference Information

CVE: CVE-2015-3416