Scientific Linux Security Update : sqlite on SL6.x i386/x86_64

High Nessus Plugin ID 85501


The remote Scientific Linux host is missing one or more security updates.


It was found that SQLite's sqlite3VXPrintf() function did not properly handle precision and width values during floating-point conversions. A local attacker could submit a specially crafted SELECT statement that would crash the SQLite process, or have other unspecified impacts.


Update the affected packages.

See Also

Plugin Details

Severity: High

ID: 85501

File Name: sl_20150817_sqlite_on_SL6_x.nasl

Version: $Revision: 2.3 $

Type: local

Agent: unix

Published: 2015/08/18

Modified: 2015/10/05

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2015/08/17

Reference Information

CVE: CVE-2015-3416