The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5615-3 advisory.

    USN-5615-1 fixed several vulnerabilities in SQLite. This update provides the corresponding fix for     CVE-2020-35525 for Ubuntu 14.04 LTS.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-2026_1644 advisory.

    This advisory aggregates security fixes for the sqlite SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE:
    CVE-2020-35525.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2022_7108 advisory.

    * sqlite: Out of bounds access during table rename (CVE-2020-35527)

    * sqlite: Null pointer derreference in src/select.c (CVE-2020-35525)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0069 advisory.

    This advisory aggregates security fixes for the sqlite SRPM in CIQ LTS 8.6. It addresses 32 CVEs:
    CVE-2020-15358, CVE-2019-19880, CVE-2020-13435, CVE-2019-13734, CVE-2019-5827, and 27 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
    (CVE-2020-35525)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3931:01 advisory.

    * sqlite: Out of bounds access during table rename (CVE-2020-35527)
      * sqlite: Null pointer derreference in src/select.c (CVE-2020-35525)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7108 advisory.

    SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A     complete database is stored in a single disk file. The API is designed for convenience and ease of use.
    Applications that link against SQLite can enjoy the power and flexibility of an SQL database without the     administrative hassles of supporting a separate database server.

    Security Fix(es):

    * sqlite: Out of bounds access during table rename (CVE-2020-35527)

    * sqlite: Null pointer derreference in src/select.c (CVE-2020-35525)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7108 advisory.

    - Fixed CVE-2020-35527

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7108 advisory.

  - In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
    (CVE-2020-35525)

  - In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a     nested FROM clause. (CVE-2020-35527)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.
    (CVE-2020-35525)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0179 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2020-35525:
    In SQlite 3.31.1, a potential null pointer derreference was found in the INTERSEC query processing.

    CVE-2020-13435:
    SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.

    CVE-2020-15358:
    In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy     heap overflow because of misuse of transitive properties for constant propagation.

    CVE-2020-35527:
    In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a     nested FROM clause.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3107 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3107-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     September 13, 2022                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : sqlite3     Version        : 3.27.2-3+deb10u2     CVE IDs        : CVE-2020-35525 CVE-2020-35527 CVE-2021-20223

    It was discovered that there were three issues in SQLite:

    * CVE-2020-35525: Prevent a potential null pointer deference issue in       INTERSEC query processing.

    * CVE-2020-35527: Prevent an out-of-bounds access issue that could be       exploited via ALTER TABLE in views that have a nested FROM clauses.

    * CVE-2021-20223: Prevent an issue with the unicode61 tokenizer       related to Unicode control characters (class Cc) and embedded NUL       characters being misinterpreted as tokens.


    For Debian 10 buster, these problems have been fixed in version     3.27.2-3+deb10u2.

    We recommend that you upgrade your sqlite3 packages.

    For the detailed security status of sqlite3 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/sqlite3

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
201117	Ubuntu 14.04 LTS : SQLite vulnerability (USN-5615-3)	Nessus	Ubuntu Local Security Checks	2024/6/27	2025/9/3	high
367424	CentOS Linux 7.9 [CIQ] Security Update: lemon / sqlite / sqlite-devel / sqlite-doc / sqlite-tcl (ciqsa-2026_1644)	Nessus	CentOS Local Security Checks	2026/10/20	2026/10/20	high
359331	Rocky Linux 8 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc Multiple Vulnerabilities (crlsa-2022_7108)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical
358285	Rocky Linux 8.6 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0069)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	high
188627	EulerOS Virtualization 3.0.6.0 : sqlite (EulerOS-SA-2023-3456)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
293610	MiracleLinux 8 : sqlite-3.26.0-16.el8 (AXSA:2022-3931:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
166492	RHEL 8 : sqlite (RHSA-2022:7108)	Nessus	Red Hat Local Security Checks	2022/10/25	2024/11/7	critical
166519	Oracle Linux 8 : sqlite (ELSA-2022-7108)	Nessus	Oracle Linux Local Security Checks	2022/10/26	2024/11/1	critical
184900	Rocky Linux 8 : sqlite (RLSA-2022:7108)	Nessus	Rocky Linux Local Security Checks	2023/11/7	2023/11/7	critical
188410	EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2023-3160)	Nessus	Huawei Local Security Checks	2024/1/16	2024/1/16	high
178853	EulerOS Virtualization 3.0.6.6 : sqlite (EulerOS-SA-2023-2437)	Nessus	Huawei Local Security Checks	2023/7/26	2023/7/26	high
236450	Alibaba Cloud Linux 3 : 0179: sqlite (ALINUX3-SA-2022:0179)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	critical
164992	Debian dla-3107 : lemon - security update	Nessus	Debian Local Security Checks	2022/9/13	2025/9/24	critical

偵測

搜尋 Plugin

high

high

critical

high

high

critical

critical

critical

critical

high

high

critical

critical