The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes     are used in a string argument to a C API. (CVE-2022-35737)

Note that Nessus relies on the presence of the package as reported by the vendor.

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2023:1698946014 advisory.

  - SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes     are used in a string argument to a C API. (CVE-2022-35737)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0493 advisory.

    This advisory aggregates security fixes for the sqlite SRPM in CIQ LTS 9.2. It addresses 6 CVEs:
    CVE-2022-35737, CVE-2025-6965, CVE-2019-19926, CVE-2017-10989, CVE-2018-8740, and 1 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202210-40 (SQLite: Multiple Vulnerabilities)

  - A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who     is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible     code execution by triggering a use-after-free. The highest threat from this vulnerability is to system     availability. (CVE-2021-20227)

  - SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes     are used in a string argument to a C API. (CVE-2022-35737)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    An issue was found in fts5UnicodeTokenize() in ext/fts5/fts5_tokenize.c in Sqlite. A unicode61 tokenizer     configured to treat unicode 'control-characters' (class Cc), was treating embedded nul characters as     tokens. The issue was fixed in sqlite-3.34.0 and later.(CVE-2021-20223)

    SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes     are used in a string argument to a C API.(CVE-2022-35737)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization sqlite security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of sqlite installed on the remote host is prior to 3.7.17-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1911 advisory.

    SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes     are used in a string argument to a C API. (CVE-2022-35737)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0007 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2022-35737:
      SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of     bytes are used in a string argument to a C API.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2023_0110 advisory.

    * sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API     (CVE-2022-35737)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2023_0339 advisory.

    * sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API     (CVE-2022-35737)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the telegraf package has been released.

ID	Name	Product	Family	Published	Updated	Severity
224802	Linux Distros Unpatched Vulnerability : CVE-2022-35737	Nessus	Misc.	3/5/2025	9/2/2026	high
353060	CentOS Linux 7 [TuxCare] Security Update: lemon / sqlite / sqlite-devel / sqlite-doc / sqlite-tcl (CENTOS7:CLSA-2023:1698946014)	Nessus	CentOS Local Security Checks	9/30/2026	9/30/2026	high
355771	Rocky Linux 9.2 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0493)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/13/2026	high
166739	GLSA-202210-40 : SQLite: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	10/31/2022	10/6/2023	high
169377	EulerOS Virtualization 2.10.0 : sqlite (EulerOS-SA-2022-2920)	Nessus	Huawei Local Security Checks	12/28/2022	9/25/2025	high
170434	Amazon Linux 2 : sqlite (ALAS-2023-1911)	Nessus	Amazon Linux Local Security Checks	1/23/2023	12/11/2024	high
238579	TencentOS Server 3: sqlite (TSSA-2023:0007)	Nessus	Tencent Local Security Checks	6/16/2025	11/20/2025	high
356008	Rocky Linux 8 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc (crlsa-2023_0110)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
356971	Rocky Linux 9 [CIQ] Security Update: sqlite / sqlite-debuginfo / sqlite-debugsource / sqlite-devel / etc (crlsa-2023_0339)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
333780	Photon OS 5.0: Telegraf PHSA-2023-5.0-91-0041	Nessus	PhotonOS Local Security Checks	8/10/2026	8/12/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high