遠端 AlmaLinux 8 主機已安裝受到多個弱點影響的套件如 ALSA-2020:4442 公告中所提及。

  - Sqlite3 的視窗函式功能中存在一個可利用的釋放後使用弱點 3.26.0。
    特別建構的 SQL 命令可造成釋放後使用弱點，進而可能導致遠端程式碼執行。攻擊者可傳送惡意的 SQL 命令，以觸發此弱點。
    (CVE-2019-5018)

  - 在 SQLite 3.29.0 及之前版本中，sqlite3.c 中的 whereLoopAddBtreeIndex 可損毀瀏覽器或其他應用程式，這是缺少對 sqlite_stat1 sz 欄位 (亦即「query planner 中嚴重的除以零」) 所致。(CVE-2019-16168)

  - 在 SQLite 3.30.1 中，select.c 中的 selectExpander 即使在剖析錯誤之後，也會繼續處理 WITH 堆疊。
    (CVE-2019-20218)

  - 在 80.0.3987.87 版之前的 Google Chrome 中，SQLite 中存在超出邊界讀取問題，遠端攻擊者可利用此問題，透過特別建構的 HTML 頁面從處理程序記憶體取得潛在的敏感資訊。(CVE-2020-6405)

  - 在 SQLite 3.31.1 中，攻擊者可利用 isAuxiliaryVtabOperator 來產生欄最佳化，進而觸發 NULL 指標解除參照和分割錯誤。(CVE-2020-9327)

  - 在 3.32.0 之前的 SQLite 中，ext/fts3/fts3.c 的 fts3EvalNextRow 中存在與 snippet 功能相關的釋放後使用。(CVE-2020-13630)

  - 借助 3.32.0 之前的 SQLite，可將虛擬表格重新命名為其影子表格之一的名稱，此名稱與 terate.c 和 build.c 相關。(CVE-2020-13631)

  - 在 3.32.0 之前的 SQLite 中，可透過建構的 matchinfo() 查詢在 ext/fts3/fts3_snippet.c 中造成 NULL 指標解除參照。(CVE-2020-13632)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

根據其自我報告的版本，遠端主機上安裝的 Tenable SecurityCenter 應用程式版本比 5.19.0 版舊。因此，會受到下列元件中的多個弱點影響： 
  - Apache FOP
  - Underscore
  - Handlebars
  - PHP
  - sqlite

請注意，如果成功惡意利用多數嚴重問題，將會導致任意程式碼執行。

This update for sqlite3 fixes the following issues :

Security issue fixed :

  - CVE-2019-16168: Fixed improper validation of     sqlite_stat1 field that could lead to denial of service     (bsc#1150137).

This update was imported from the SUSE:SLE-15:Update update project.

An update of the sqlite package has been released.

The version of Oracle (formerly Sun) Java SE or Java for Business installed on the remote host is prior to 7 Update 251, 8 Update 241, 11 Update 6, or 13 Update 2. It is, therefore, affected by multiple vulnerabilities:

  - Oracle Java SE and Java SE Embedded are prone to a severe division by zero, over 'Multiple' protocol.
    This issue affects the 'SQLite' component.(CVE-2019-16168)

  - Oracle Java SE and Java SE Embedded are prone to format string vulnerability, leading to a read     uninitialized stack data over 'Multiple' protocol. This issue affects the 'libxst' component.
    (CVE-2019-13117, CVE-2019-13118)

  - Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. An unauthenticated     remote attacker can exploit this over 'Kerberos' protocol. This issue affects the 'Security' component.
    (CVE-2020-2601, CVE-2020-2590)

  - Oracle Java SE/Java SE Embedded are prone to a remote security vulnerability. An unauthenticated     remote attacker can exploit this overmultiple protocols. This issue affects the 'Serialization' component.
    (CVE-2020-2604, CVE-2020-2583)

  - Oracle Java SE/Java SE Embedded are prone to a remote security vulnerability. Tn unauthenticated     remote attacker can exploit this over multiple protocols. This issue affects the 'Networking' component.
    (CVE-2020-2593, CVE-2020-2659)

  - Oracle Java SE are prone to a remote security vulnerability. An unauthenticated remote attacker can exploit     this over multiple protocols. This issue affects the 'Libraries' component. (CVE-2020-2654)

  - Oracle Java SE are prone to a multiple security vulnerability. An unauthenticated remote attacker can exploit     this over multiple protocols. This issue affects the 'JavaFX' component. (CVE-2020-2585)

  - Oracle Java SE are prone to a multiple security vulnerability. An unauthenticate remote attacker can exploit     this over 'HTTPS' protocols. This issue affects the 'JSSE' component. (CVE-2020-2655)

Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4205-1 advisory.

    It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this     issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM. (CVE-2018-8740)

    It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this     issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu     19.04. (CVE-2019-16168)

    It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this     issue to mishandles some expressions. This issue only affected Ubuntu 19.04 and Ubuntu 19.10.
    (CVE-2019-19242)

    It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this     issue to execute arbitrary code. This issue only affected Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-19244)

    It was discovered that SQLite incorrectly handled certain SQL commands. An attacker could possibly use     this issue to execute arbitrary code. This issue only affected Ubuntu 19.04. (CVE-2019-5018)

    It was discovered that SQLite incorrectly handled certain commands. An attacker could possibly use this     issue to execute arbitrary code. (CVE-2019-5827)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has sqlite packages installed that are affected by multiple vulnerabilities:

  - An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0.
    A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote     code execution. An attacker can send a malicious SQL command to trigger this vulnerability.
    (CVE-2019-5018)

  - In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application     because of missing validation of a sqlite_stat1 sz field, aka a severe division by zero in the query     planner. (CVE-2019-16168)

  - In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and     segmentation fault because of generated column optimizations. (CVE-2020-9327)

  - selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.
    (CVE-2019-20218)

  - ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet     feature. (CVE-2020-13630)

  - SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related     to alter.c and build.c. (CVE-2020-13631)

  - ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo()     query. (CVE-2020-13632)

  - Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted HTML page. (CVE-2020-6405)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - In SQLite through 3.29.0, whereLoopAddBtreeIndex in     sqlite3.c can crash a browser or other application     because of missing validation of a sqlite_stat1 sz     field, aka a 'severe division by zero in the query     planner.'(CVE-2019-16168)

  - pragma.c in SQLite through 3.30.1 mishandles NOT NULL     in an integrity_check PRAGMA command in certain cases     of generated columns.(CVE-2019-19646)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4442 advisory.

    SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A     complete database is stored in a single disk file. The API is designed for convenience and ease of use.
    Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the     administrative hassles of supporting a separate database server.

    Security Fix(es):

    * sqlite: Use-after-free in window function leading to remote code execution (CVE-2019-5018)

    * sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c (CVE-2019-16168)

    * sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error     (CVE-2019-20218)

    * sqlite: Out-of-bounds read in SELECT with ON/USING clause (CVE-2020-6405)

    * sqlite: NULL pointer dereference and segmentation fault because of generated column optimizations     (CVE-2020-9327)

    * sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c (CVE-2020-13630)

    * sqlite: Virtual table can be renamed into the name of one of its shadow tables (CVE-2020-13631)

    * sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query     (CVE-2020-13632)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0111 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2019-13734:
    Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page.

    CVE-2019-13752:
    Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted HTML page.

    CVE-2019-13753:
    Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted HTML page.

    CVE-2019-16168:
    In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application     because of missing validation of a sqlite_stat1 sz field, aka a severe division by zero in the query     planner.

    CVE-2019-19923:
    flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT     JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect     results).

    CVE-2019-19924:
    SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This     is caused by incorrect sqlite3WindowRewrite() error handling.

    CVE-2019-19925:
    zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP     archive.

    CVE-2019-19959:
    ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving     embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for     example) valgrind.

    CVE-2019-20218:
    selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.

    CVE-2019-5018:
    An exploitable use after free vulnerability exists in the window function functionality of Sqlite3 3.26.0.
    A specially crafted SQL command can cause a use after free vulnerability, potentially resulting in remote     code execution. An attacker can send a malicious SQL command to trigger this vulnerability.

    CVE-2019-8457:
    SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode()     function when handling invalid rtree tables.

    CVE-2020-0327:
    In core networking, there is a missing permission check. This could lead to local information disclosure     of app network usage with User execution privileges needed. User interaction is not needed for     exploitation.Product: AndroidVersions: Android-11Android ID: A-129151407

    CVE-2020-13434:
    SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

    CVE-2020-13630:
    ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet     feature.

    CVE-2020-13631:
    SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related     to alter.c and build.c.

    CVE-2020-13632:
    ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo()     query.

    CVE-2020-15358:
    In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy     heap overflow because of misuse of transitive properties for constant propagation.

    CVE-2020-6405:
    Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain     potentially sensitive information from process memory via a crafted HTML page.

    CVE-2020-9327:
    In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and     segmentation fault because of generated column optimizations.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
157634	AlmaLinux 8sqlite (ALSA-2020:4442)	Nessus	Alma Linux Local Security Checks	2/9/2022	11/10/2023	high
152986	Tenable SecurityCenter < 5.19.0 多個弱點 (TNS-2021-14)	Nessus	Misc.	9/3/2021	5/10/2024	critical
129744	openSUSE Security Update : sqlite3 (openSUSE-2019-2298)	Nessus	SuSE Local Security Checks	10/9/2019	4/18/2024	medium
203074	Photon OS 3.0: Sqlite PHSA-2019-3.0-0036	Nessus	PhotonOS Local Security Checks	7/23/2024	7/24/2024	medium
129165	Photon OS 3.0: Sqlite PHSA-2019-3.0-0030	Nessus	PhotonOS Local Security Checks	9/23/2019	7/23/2024	medium
132960	Oracle Java SE 1.7.0_251 / 1.8.0_241 / 1.11.0_6 / 1.13.0_2 Multiple Vulnerabilities (Jan 2020 CPU) (Unix)	Nessus	Misc.	1/16/2020	10/21/2022	high
131561	Ubuntu 16.04 LTS / 18.04 LTS : SQLite vulnerabilities (USN-4205-1)	Nessus	Ubuntu Local Security Checks	12/3/2019	9/3/2025	high
147397	NewStart CGSL MAIN 6.02 : sqlite Multiple Vulnerabilities (NS-SA-2021-0064)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	1/11/2024	high
132833	EulerOS Virtualization for ARM 64 3.0.5.0 : sqlite (EulerOS-SA-2020-1079)	Nessus	Huawei Local Security Checks	1/13/2020	4/1/2024	critical
142429	RHEL 8 : sqlite (RHSA-2020:4442)	Nessus	Red Hat Local Security Checks	11/4/2020	11/7/2024	high
236583	Alibaba Cloud Linux 3 : 0111: sqlite (ALINUX3-SA-2022:0111)	Nessus	Alibaba Cloud Linux Local Security Checks	5/14/2025	5/14/2025	critical

Detections

Analytics

Plugins Search

high

critical

medium

medium

medium

high

high

high

critical

high

critical