The version of Apple iOS running on the mobile device is prior to 12.1.3. It is, therefore, affected by multiple vulnerabilities:

  - Multiple unspecified vulnerabilities in WebKit     can lead to arbitrary code execution if a user     is enticed to visit a malicious web page.
    (CVE-2019-6227, CVE-2019-6233, CVE-2019-6234)

  - A maliciously crafted SQL query could lead to     arbitrary code execution.
    (CVE-2018-20346, CVE-2018-20505,     CVE-2018-20506)

  - A malicious application could lead to arbitrary     code execution with kernel privileges.
    (CVE-2019-6218)

Additionally several other vulnerabilities exist, the highest of which could allow an attacker to perform a remote code execution attack by enticing a user to view malicious web content.

According to the version of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Multiple flaws were found in sqlite. An attacker having     the ability to run arbitrary SQL commands could use     this flaw to execute arbitrary code with the permission     of the user running the sqlite     application.(CVE-2018-20346)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for sqlite3 fixes the following issues :

Security issues fixed :

  - CVE-2018-20346: Fixed a remote code execution     vulnerability in FTS3 (Magellan) (bsc#1119687).

  - CVE-2018-20506: Fixed an integer overflow when FTS3     extension is enabled (bsc#1131576). 

This update was imported from the SUSE:SLE-12-SP1:Update update project.

This update for sqlite3 fixes the following issues :

Security issues fixed :

CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled (bsc#1131576).

CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 (Magellan) (bsc#1119687).

CVE-2016-6153: Fixed incorrect permissions when creating temporary files (bsc#987394).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
121331	Apple iOS < 12.1.3 Multiple Vulnerabilities	Nessus	Mobile Devices	2019/1/23	2026/8/10	critical
123626	EulerOS 2.0 SP5 : sqlite (EulerOS-SA-2019-1152)	Nessus	Huawei Local Security Checks	2019/4/2	2025/3/12	high
124143	openSUSE Security Update : sqlite3 (openSUSE-2019-1222)	Nessus	SuSE Local Security Checks	2019/4/18	2025/3/11	high
124150	SUSE SLES12 Security Update : sqlite3 (SUSE-SU-2019:0973-1)	Nessus	SuSE Local Security Checks	2019/4/18	2025/3/11	high

偵測

搜尋 Plugin

critical

high

high

high