Vulnerabilities > CVE-2018-20505 - SQL Injection vulnerability in multiple products

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

nessus

NVD

Published: 2019-04-03

Updated: 2019-06-19

Summary

SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).

Vulnerable Configurations

Part	Description	Count
Application	Sqlite Sqlite Sqlite 1.0 Sqlite Sqlite 1.0.1 Sqlite Sqlite 1.0.3 Sqlite Sqlite 1.0.4 Sqlite Sqlite 1.0.5 Sqlite Sqlite 1.0.8 Sqlite Sqlite 1.0.9 Sqlite Sqlite 1.0.10 Sqlite Sqlite 1.0.12 Sqlite Sqlite 1.0.13 Sqlite Sqlite 1.0.14 Sqlite Sqlite 1.0.15 Sqlite Sqlite 1.0.16 Sqlite Sqlite 1.0.17 Sqlite Sqlite 1.0.18 Sqlite Sqlite 1.0.19 Sqlite Sqlite 1.0.20 Sqlite Sqlite 1.0.21 Sqlite Sqlite 1.0.22 Sqlite Sqlite 1.0.23 Sqlite Sqlite 1.0.24 Sqlite Sqlite 1.0.25 Sqlite Sqlite 1.0.26 Sqlite Sqlite 1.0.27 Sqlite Sqlite 1.0.28 Sqlite Sqlite 1.0.29 Sqlite Sqlite 1.0.30 Sqlite Sqlite 1.0.31 Sqlite Sqlite 1.0.32 Sqlite Sqlite 2.0.0 Sqlite Sqlite 2.0.1 Sqlite Sqlite 2.0.2 Sqlite Sqlite 2.0.3 Sqlite Sqlite 2.0.4 Sqlite Sqlite 2.0.5 Sqlite Sqlite 2.0.6 Sqlite Sqlite 2.0.7 Sqlite Sqlite 2.0.8 Sqlite Sqlite 2.1.0 Sqlite Sqlite 2.1.1 Sqlite Sqlite 2.1.2 Sqlite Sqlite 2.1.3 Sqlite Sqlite 2.1.4 Sqlite Sqlite 2.1.5 Sqlite Sqlite 2.1.6 Sqlite Sqlite 2.1.7 Sqlite Sqlite 2.2.0 Sqlite Sqlite 2.2.1 Sqlite Sqlite 2.2.2 Sqlite Sqlite 2.2.3 Sqlite Sqlite 2.2.4 Sqlite Sqlite 2.2.5 Sqlite Sqlite 2.3.0 Sqlite Sqlite 2.3.1 Sqlite Sqlite 2.3.2 Sqlite Sqlite 2.3.3 Sqlite Sqlite 2.4.0 Sqlite Sqlite 2.4.1 Sqlite Sqlite 2.4.2 Sqlite Sqlite 2.4.3 Sqlite Sqlite 2.4.4 Sqlite Sqlite 2.4.5 Sqlite Sqlite 2.4.6 Sqlite Sqlite 2.4.7 Sqlite Sqlite 2.4.8 Sqlite Sqlite 2.4.9 Sqlite Sqlite 2.4.10 Sqlite Sqlite 2.4.11 Sqlite Sqlite 2.4.12 Sqlite Sqlite 2.5.0 Sqlite Sqlite 2.5.1 Sqlite Sqlite 2.5.2 Sqlite Sqlite 2.5.3 Sqlite Sqlite 2.5.4 Sqlite Sqlite 2.5.5 Sqlite Sqlite 2.5.6 Sqlite Sqlite 2.6.0 Sqlite Sqlite 2.6.1 Sqlite Sqlite 2.6.2 Sqlite Sqlite 2.6.3 Sqlite Sqlite 2.7.0 Sqlite Sqlite 2.7.1 Sqlite Sqlite 2.7.2 Sqlite Sqlite 2.7.3 Sqlite Sqlite 2.7.4 Sqlite Sqlite 2.7.5 Sqlite Sqlite 2.7.6 Sqlite Sqlite 2.8.0 Sqlite Sqlite 2.8.1 Sqlite Sqlite 2.8.2 Sqlite Sqlite 2.8.3 Sqlite Sqlite 2.8.4 Sqlite Sqlite 2.8.5 Sqlite Sqlite 2.8.6 Sqlite Sqlite 2.8.7 Sqlite Sqlite 2.8.8 Sqlite Sqlite 2.8.9 Sqlite Sqlite 2.8.10 Sqlite Sqlite 2.8.11 Sqlite Sqlite 2.8.12 Sqlite Sqlite 2.8.13 Sqlite Sqlite 2.8.14 Sqlite Sqlite 2.8.15 Sqlite Sqlite 2.8.16 Sqlite Sqlite 2.8.17 Sqlite Sqlite 3.0.0 Sqlite Sqlite 3.0.1 Sqlite Sqlite 3.0.2 Sqlite Sqlite 3.0.3 Sqlite Sqlite 3.0.4 Sqlite Sqlite 3.0.5 Sqlite Sqlite 3.0.6 Sqlite Sqlite 3.0.7 Sqlite Sqlite 3.0.8 Sqlite Sqlite 3.1.0 Sqlite Sqlite 3.1.1 Sqlite Sqlite 3.1.2 Sqlite Sqlite 3.1.3 Sqlite Sqlite 3.1.3.1 Sqlite Sqlite 3.1.4 Sqlite Sqlite 3.1.5 Sqlite Sqlite 3.1.6 Sqlite Sqlite 3.2.0 Sqlite Sqlite 3.2.1 Sqlite Sqlite 3.2.2 Sqlite Sqlite 3.2.3 Sqlite Sqlite 3.2.4 Sqlite Sqlite 3.2.5 Sqlite Sqlite 3.2.6 Sqlite Sqlite 3.2.7 Sqlite Sqlite 3.2.8 Sqlite Sqlite 3.3.0 Sqlite Sqlite 3.3.1 Sqlite Sqlite 3.3.2 Sqlite Sqlite 3.3.3 Sqlite Sqlite 3.3.4 Sqlite Sqlite 3.3.5 Sqlite Sqlite 3.3.6 Sqlite Sqlite 3.3.7 Sqlite Sqlite 3.3.8 Sqlite Sqlite 3.3.9 Sqlite Sqlite 3.3.10 Sqlite Sqlite 3.3.11 Sqlite Sqlite 3.3.12 Sqlite Sqlite 3.3.13 Sqlite Sqlite 3.3.14 Sqlite Sqlite 3.3.15 Sqlite Sqlite 3.3.16 Sqlite Sqlite 3.3.17 Sqlite Sqlite 3.4.0 Sqlite Sqlite 3.4.1 Sqlite Sqlite 3.4.2 Sqlite Sqlite 3.5.0 Sqlite Sqlite 3.5.1 Sqlite Sqlite 3.5.2 Sqlite Sqlite 3.5.3 Sqlite Sqlite 3.5.4 Sqlite Sqlite 3.5.5 Sqlite Sqlite 3.5.6 Sqlite Sqlite 3.5.7 Sqlite Sqlite 3.5.8 Sqlite Sqlite 3.5.9 Sqlite Sqlite 3.6.0 Sqlite Sqlite 3.6.1 Sqlite Sqlite 3.6.2 Sqlite Sqlite 3.6.3 Sqlite Sqlite 3.6.4 Sqlite Sqlite 3.6.5 Sqlite Sqlite 3.6.6 Sqlite Sqlite 3.6.6.1 Sqlite Sqlite 3.6.6.2 Sqlite Sqlite 3.6.7 Sqlite Sqlite 3.6.8 Sqlite Sqlite 3.6.9 Sqlite Sqlite 3.6.10 Sqlite Sqlite 3.6.11 Sqlite Sqlite 3.6.12 Sqlite Sqlite 3.6.13 Sqlite Sqlite 3.6.14 Sqlite Sqlite 3.6.14.1 Sqlite Sqlite 3.6.14.2 Sqlite Sqlite 3.6.15 Sqlite Sqlite 3.6.16 Sqlite Sqlite 3.6.16.1 Sqlite Sqlite 3.6.17 Sqlite Sqlite 3.6.18 Sqlite Sqlite 3.6.19 Sqlite Sqlite 3.6.20 Sqlite Sqlite 3.6.21 Sqlite Sqlite 3.6.22 Sqlite Sqlite 3.6.23 Sqlite Sqlite 3.6.23.1 Sqlite Sqlite 3.7.0 Sqlite Sqlite 3.7.0.1 Sqlite Sqlite 3.7.1 Sqlite Sqlite 3.7.2 Sqlite Sqlite 3.7.3 Sqlite Sqlite 3.7.4 Sqlite Sqlite 3.7.5 Sqlite Sqlite 3.7.6 Sqlite Sqlite 3.7.6.1 Sqlite Sqlite 3.7.6.2 Sqlite Sqlite 3.7.6.3 Sqlite Sqlite 3.7.7 Sqlite Sqlite 3.7.7.1 Sqlite Sqlite 3.7.8 Sqlite Sqlite 3.7.9 Sqlite Sqlite 3.7.10 Sqlite Sqlite 3.7.11 Sqlite Sqlite 3.7.12 Sqlite Sqlite 3.7.12.1 Sqlite Sqlite 3.7.13 Sqlite Sqlite 3.7.14 Sqlite Sqlite 3.7.14.1 Sqlite Sqlite 3.7.15 Sqlite Sqlite 3.7.15.1 Sqlite Sqlite 3.7.15.2 Sqlite Sqlite 3.7.16 Sqlite Sqlite 3.7.16.1 Sqlite Sqlite 3.7.16.2 Sqlite Sqlite 3.7.17 Sqlite Sqlite 3.8.0 Sqlite Sqlite 3.8.0.1 Sqlite Sqlite 3.8.0.2 Sqlite Sqlite 3.8.1 Sqlite Sqlite 3.8.2 Sqlite Sqlite 3.8.3 Sqlite Sqlite 3.8.3.1 Sqlite Sqlite 3.8.4 Sqlite Sqlite 3.8.4.1 Sqlite Sqlite 3.8.4.2 Sqlite Sqlite 3.8.4.3 Sqlite Sqlite 3.8.5 Sqlite Sqlite 3.8.6 Sqlite Sqlite 3.8.6.1 Sqlite Sqlite 3.8.7 Sqlite Sqlite 3.8.7.1 Sqlite Sqlite 3.8.7.2 Sqlite Sqlite 3.8.7.3 Sqlite Sqlite 3.8.7.4 Sqlite Sqlite 3.8.8 Sqlite Sqlite 3.8.8.1 Sqlite Sqlite 3.8.8.2 Sqlite Sqlite 3.8.8.3 Sqlite Sqlite 3.8.9 Sqlite Sqlite 3.8.10 Sqlite Sqlite 3.8.10.1 Sqlite Sqlite 3.8.10.2 Sqlite Sqlite 3.8.11 Sqlite Sqlite 3.8.11.1 Sqlite Sqlite 3.9.0 Sqlite Sqlite 3.9.1 Sqlite Sqlite 3.9.2 Sqlite Sqlite 3.9.3 Sqlite Sqlite 3.10.0 Sqlite Sqlite 3.10.1 Sqlite Sqlite 3.10.2 Sqlite Sqlite 3.11.0 Sqlite Sqlite 3.11.1 Sqlite Sqlite 3.12.0 Sqlite Sqlite 3.12.1 Sqlite Sqlite 3.12.2 Sqlite Sqlite 3.13.0 Sqlite Sqlite 3.14 Sqlite Sqlite 3.14.1 Sqlite Sqlite 3.14.2 Sqlite Sqlite 3.15.0 Sqlite Sqlite 3.15.1 Sqlite Sqlite 3.15.2 Sqlite Sqlite 3.16.0 Sqlite Sqlite 3.16.1 Sqlite Sqlite 3.16.2 Sqlite Sqlite 3.17.0 Sqlite Sqlite 3.18.0 Sqlite Sqlite 3.18.1 Sqlite Sqlite 3.18.2 Sqlite Sqlite 3.19.0 Sqlite Sqlite 3.19.1 Sqlite Sqlite 3.19.2 Sqlite Sqlite 3.19.3 Sqlite Sqlite 3.20.0 Sqlite Sqlite 3.20.1 Sqlite Sqlite 3.21.0 Sqlite Sqlite 3.22.0 Sqlite Sqlite 3.23.0 Sqlite Sqlite 3.23.1 Sqlite Sqlite 3.24.0 Sqlite Sqlite 3.25.0 Sqlite Sqlite 3.25.1 Sqlite Sqlite 3.25.02	290
Application	Apple Apple Icloud 5.2.1 Apple Icloud 6.0 Apple Icloud 6.0.1 Apple Icloud 6.1 Apple Icloud 6.1.1 Apple Icloud 6.2 Apple Icloud 6.2.2 Apple Icloud 7.0 Apple Icloud 7.1 Apple Icloud 7.2 Apple Icloud 7.3 Apple Icloud 7.4 Apple Icloud 7.5 Apple Icloud 7.6 Apple Icloud 7.7 Apple Icloud 7.8 Apple Icloud 7.8.1 Apple Icloud 7.9 Apple Itunes - Apple Itunes 4.0.0 Apple Itunes 4.0.1 Apple Itunes 4.1.0 Apple Itunes 4.2.0 Apple Itunes 4.5 Apple Itunes 4.5.0 Apple Itunes 4.6 Apple Itunes 4.6.0 Apple Itunes 4.7 Apple Itunes 4.7.0 Apple Itunes 4.7.1 Apple Itunes 4.7.2 Apple Itunes 4.8.0 Apple Itunes 4.9.0 Apple Itunes 5.0 Apple Itunes 5.0.0 Apple Itunes 5.0.1 Apple Itunes 6.0.0 Apple Itunes 6.0.1 Apple Itunes 6.0.2 Apple Itunes 6.0.3 Apple Itunes 6.0.4 Apple Itunes 6.0.5 Apple Itunes 7.0.0 Apple Itunes 7.0.1 Apple Itunes 7.0.2 Apple Itunes 7.1.0 Apple Itunes 7.1.1 Apple Itunes 7.2.0 Apple Itunes 7.3.0 Apple Itunes 7.3.1 Apple Itunes 7.3.2 Apple Itunes 7.4 Apple Itunes 7.4.0 Apple Itunes 7.4.1 Apple Itunes 7.4.2 Apple Itunes 7.4.3 Apple Itunes 7.5 Apple Itunes 7.5.0 Apple Itunes 7.6 Apple Itunes 7.6.0 Apple Itunes 7.6.1 Apple Itunes 7.6.2 Apple Itunes 7.7 Apple Itunes 7.7.0 Apple Itunes 7.7.1 Apple Itunes 8.0.0 Apple Itunes 8.0.1 Apple Itunes 8.1 Apple Itunes 9.0.0 Apple Itunes 9.0.1 Apple Itunes 9.0.2 Apple Itunes 9.0.3 Apple Itunes 9.1 Apple Itunes 9.1.1 Apple Itunes 9.2 Apple Itunes 9.2.1 Apple Itunes 10.0 Apple Itunes 10.0.1 Apple Itunes 10.1 Apple Itunes 10.1.1 Apple Itunes 10.1.1.4 Apple Itunes 10.1.2 Apple Itunes 10.2 Apple Itunes 10.2.2.12 Apple Itunes 10.3 Apple Itunes 10.3.1 Apple Itunes 10.4 Apple Itunes 10.4.0.80 Apple Itunes 10.4.1 Apple Itunes 10.4.1.10 Apple Itunes 10.5 Apple Itunes 10.5.1 Apple Itunes 10.5.1.42 Apple Itunes 10.5.2 Apple Itunes 10.5.3 Apple Itunes 10.6 Apple Itunes 10.6.1 Apple Itunes 10.6.3 Apple Itunes 11.0 Apple Itunes 11.0.1 Apple Itunes 11.0.2 Apple Itunes 11.0.3 Apple Itunes 11.0.4 Apple Itunes 11.0.5 Apple Itunes 11.1 Apple Itunes 11.1.1 Apple Itunes 11.1.2 Apple Itunes 11.1.3 Apple Itunes 11.1.4 Apple Itunes 11.1.5 Apple Itunes 11.2 Apple Itunes 11.2.1 Apple Itunes 12.0 Apple Itunes 12.0.1 Apple Itunes 12.1 Apple Itunes 12.1.1 Apple Itunes 12.1.2 Apple Itunes 12.1.3 Apple Itunes 12.2 Apple Itunes 12.2.1 Apple Itunes 12.2.2 Apple Itunes 12.3 Apple Itunes 12.3.0 Apple Itunes 12.3.1 Apple Itunes 12.4 Apple Itunes 12.4.1 Apple Itunes 12.4.2 Apple Itunes 12.4.3 Apple Itunes 12.5 Apple Itunes 12.5.1 Apple Itunes 12.5.2 Apple Itunes 12.5.3 Apple Itunes 12.5.4 Apple Itunes 12.5.5 Apple Itunes 12.6 Apple Itunes 12.6.1 Apple Itunes 12.6.2 Apple Itunes 12.6.3 Apple Itunes 12.7 Apple Itunes 12.7.1 Apple Itunes 12.7.2 Apple Itunes 12.7.3 Apple Itunes 12.7.4 Apple Itunes 12.7.5 Apple Itunes 12.8 Apple Itunes 12.9 Apple Itunes 12.9.1 Apple Itunes 12.9.2	247
OS	Apple Apple Iphone OS 1.0.0 Apple Iphone OS 1.0.1 Apple Iphone OS 1.0.2 Apple Iphone OS 1.1.0 Apple Iphone OS 1.1.1 Apple Iphone OS 1.1.2 Apple Iphone OS 1.1.3 Apple Iphone OS 1.1.4 Apple Iphone OS 1.1.5 Apple Iphone OS 2.0 Apple Iphone OS 2.0.0 Apple Iphone OS 2.0.1 Apple Iphone OS 2.0.2 Apple Iphone OS 2.1 Apple Iphone OS 2.1.1 Apple Iphone OS 2.2 Apple Iphone OS 2.2.1 Apple Iphone OS 3.0 Apple Iphone OS 3.0.1 Apple Iphone OS 3.1 Apple Iphone OS 3.1.1 Apple Iphone OS 3.1.2 Apple Iphone OS 3.1.3 Apple Iphone OS 3.2 Apple Iphone OS 3.2.1 Apple Iphone OS 3.2.2 Apple Iphone OS 4.0 Apple Iphone OS 4.0.1 Apple Iphone OS 4.0.2 Apple Iphone OS 4.1 Apple Iphone OS 4.2.1 Apple Iphone OS 4.2.5 Apple Iphone OS 4.2.6 Apple Iphone OS 4.2.7 Apple Iphone OS 4.2.8 Apple Iphone OS 4.2.9 Apple Iphone OS 4.2.10 Apple Iphone OS 4.3.0 Apple Iphone OS 4.3.1 Apple Iphone OS 4.3.2 Apple Iphone OS 4.3.3 Apple Iphone OS 4.3.4 Apple Iphone OS 4.3.5 Apple Iphone OS 5.0 Apple Iphone OS 5.0.1 Apple Iphone OS 5.1 Apple Iphone OS 5.1.1 Apple Iphone OS 6.0 Apple Iphone OS 6.0.1 Apple Iphone OS 6.0.2 Apple Iphone OS 6.1 Apple Iphone OS 6.1.2 Apple Iphone OS 6.1.3 Apple Iphone OS 6.1.4 Apple Iphone OS 6.1.5 Apple Iphone OS 6.1.6 Apple Iphone OS 7.0 Apple Iphone OS 7.0.1 Apple Iphone OS 7.0.2 Apple Iphone OS 7.0.3 Apple Iphone OS 7.0.4 Apple Iphone OS 7.0.5 Apple Iphone OS 7.0.6 Apple Iphone OS 7.1 Apple Iphone OS 7.1.1 Apple Iphone OS 7.1.2 Apple Iphone OS 8.0 Apple Iphone OS 8.0.1 Apple Iphone OS 8.0.2 Apple Iphone OS 8.1 Apple Iphone OS 8.1.1 Apple Iphone OS 8.1.2 Apple Iphone OS 8.1.3 Apple Iphone OS 8.2 Apple Iphone OS 8.3 Apple Iphone OS 8.4 Apple Iphone OS 8.4.1 Apple Iphone OS 9.0 Apple Iphone OS 9.0.1 Apple Iphone OS 9.0.2 Apple Iphone OS 9.1 Apple Iphone OS 9.2 Apple Iphone OS 9.2.1 Apple Iphone OS 9.3 Apple Iphone OS 9.3.1 Apple Iphone OS 9.3.2 Apple Iphone OS 9.3.3 Apple Iphone OS 9.3.4 Apple Iphone OS 9.3.5 Apple Iphone OS 9.3.6 Apple Iphone OS 10.0 Apple Iphone OS 10.0.1 Apple Iphone OS 10.0.2 Apple Iphone OS 10.0.3 Apple Iphone OS 10.1 Apple Iphone OS 10.1.1 Apple Iphone OS 10.2 Apple Iphone OS 10.2.1 Apple Iphone OS 10.3 Apple Iphone OS 10.3.1 Apple Iphone OS 10.3.2 Apple Iphone OS 10.3.3 Apple Iphone OS 10.3.4 Apple Iphone OS 11 Apple Iphone OS 11.0 Apple Iphone OS 11.0.1 Apple Iphone OS 11.0.2 Apple Iphone OS 11.0.3 Apple Iphone OS 11.1 Apple Iphone OS 11.1.1 Apple Iphone OS 11.1.2 Apple Iphone OS 11.2 Apple Iphone OS 11.2.1 Apple Iphone OS 11.2.2 Apple Iphone OS 11.2.5 Apple Iphone OS 11.2.6 Apple Iphone OS 11.3 Apple Iphone OS 11.3.1 Apple Iphone OS 11.4 Apple Iphone OS 11.4.1 Apple Iphone OS 12.0 Apple Iphone OS 12.0.1 Apple Iphone OS 12.1 Apple Iphone OS 12.1.1 Apple Iphone OS 12.1.2 Apple MAC OS X - Apple MAC OS X 10.0 Apple MAC OS X 10.0.0 Apple MAC OS X 10.0.1 Apple MAC OS X 10.0.2 Apple MAC OS X 10.0.3 Apple MAC OS X 10.0.4 Apple MAC OS X 10.1 Apple MAC OS X 10.1.0 Apple MAC OS X 10.1.1 Apple MAC OS X 10.1.2 Apple MAC OS X 10.1.3 Apple MAC OS X 10.1.4 Apple MAC OS X 10.1.5 Apple MAC OS X 10.2 Apple MAC OS X 10.2.0 Apple MAC OS X 10.2.1 Apple MAC OS X 10.2.2 Apple MAC OS X 10.2.3 Apple MAC OS X 10.2.4 Apple MAC OS X 10.2.5 Apple MAC OS X 10.2.6 Apple MAC OS X 10.2.7 Apple MAC OS X 10.2.8 Apple MAC OS X 10.3 Apple MAC OS X 10.3.0 Apple MAC OS X 10.3.1 Apple MAC OS X 10.3.2 Apple MAC OS X 10.3.3 Apple MAC OS X 10.3.4 Apple MAC OS X 10.3.5 Apple MAC OS X 10.3.6 Apple MAC OS X 10.3.7 Apple MAC OS X 10.3.8 Apple MAC OS X 10.3.9 Apple MAC OS X 10.4 Apple MAC OS X 10.4.0 Apple MAC OS X 10.4.1 Apple MAC OS X 10.4.2 Apple MAC OS X 10.4.3 Apple MAC OS X 10.4.4 Apple MAC OS X 10.4.5 Apple MAC OS X 10.4.6 Apple MAC OS X 10.4.7 Apple MAC OS X 10.4.8 Apple MAC OS X 10.4.9 Apple MAC OS X 10.4.10 Apple MAC OS X 10.4.11 Apple MAC OS X 10.5 Apple MAC OS X 10.5.0 Apple MAC OS X 10.5.1 Apple MAC OS X 10.5.2 Apple MAC OS X 10.5.3 Apple MAC OS X 10.5.4 Apple MAC OS X 10.5.5 Apple MAC OS X 10.5.6 Apple MAC OS X 10.5.7 Apple MAC OS X 10.5.8 Apple MAC OS X 10.6.0 Apple MAC OS X 10.6.1 Apple MAC OS X 10.6.2 Apple MAC OS X 10.6.3 Apple MAC OS X 10.6.4 Apple MAC OS X 10.6.5 Apple MAC OS X 10.6.6 Apple MAC OS X 10.6.7 Apple MAC OS X 10.6.8 Apple MAC OS X 10.7.0 Apple MAC OS X 10.7.1 Apple MAC OS X 10.7.2 Apple MAC OS X 10.7.3 Apple MAC OS X 10.7.4 Apple MAC OS X 10.7.5 Apple MAC OS X 10.8.0 Apple MAC OS X 10.8.1 Apple MAC OS X 10.8.2 Apple MAC OS X 10.8.3 Apple MAC OS X 10.8.4 Apple MAC OS X 10.8.5 Apple MAC OS X 10.9 Apple MAC OS X 10.9.1 Apple MAC OS X 10.9.2 Apple MAC OS X 10.9.3 Apple MAC OS X 10.9.4 Apple MAC OS X 10.9.5 Apple MAC OS X 10.10.0 Apple MAC OS X 10.10.1 Apple MAC OS X 10.10.2 Apple MAC OS X 10.10.3 Apple MAC OS X 10.10.4 Apple MAC OS X 10.10.5 Apple MAC OS X 10.11.0 Apple MAC OS X 10.11.1 Apple MAC OS X 10.11.2 Apple MAC OS X 10.11.3 Apple MAC OS X 10.11.4 Apple MAC OS X 10.11.5 Apple MAC OS X 10.11.6 Apple MAC OS X 10.12 Apple MAC OS X 10.12.0 Apple MAC OS X 10.12.1 Apple MAC OS X 10.12.2 Apple MAC OS X 10.12.3 Apple MAC OS X 10.12.4 Apple MAC OS X 10.12.5 Apple MAC OS X 10.12.6 Apple MAC OS X 10.13 Apple MAC OS X 10.13.0 Apple MAC OS X 10.13.1 Apple MAC OS X 10.13.2 Apple MAC OS X 10.13.3 Apple MAC OS X 10.13.4 Apple MAC OS X 10.13.5 Apple MAC OS X 10.13.6 Apple MAC OS X 10.14 Apple MAC OS X 10.14.1 Apple Watchos 1.0 Apple Watchos 1.0.1 Apple Watchos 2.0 Apple Watchos 2.0.1 Apple Watchos 2.1 Apple Watchos 2.2 Apple Watchos 2.2.0 Apple Watchos 2.2.1 Apple Watchos 2.2.2 Apple Watchos 3.0 Apple Watchos 3.1 Apple Watchos 3.1.1 Apple Watchos 3.1.3 Apple Watchos 3.2 Apple Watchos 3.2.2 Apple Watchos 3.2.3 Apple Watchos 4 Apple Watchos 4.0 Apple Watchos 4.0.1 Apple Watchos 4.1 Apple Watchos 4.2.3 Apple Watchos 4.3 Apple Watchos 4.3.1 Apple Watchos 4.3.2 Apple Watchos 5.0 Apple Watchos 5.0.1 Apple Watchos 5.1 Apple Watchos 5.1.1 Apple Watchos 5.1.2	324
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Common Attack Pattern Enumeration and Classification (CAPEC)

Command Line Execution through SQL Injection
An attacker uses standard SQL injection methods to inject data into the command line for execution. This could be done directly through misuse of directives such as MSSQL_xp_cmdshell or indirectly through injection of data into the database that would be interpreted as shell commands. Sometime later, an unscrupulous backend application (or could be part of the functionality of the same application) fetches the injected data stored in the database and uses this data as command line arguments without performing proper validation. The malicious data escapes that data plane by spawning new commands to be executed on the host.
Object Relational Mapping Injection
An attacker leverages a weakness present in the database access layer code generated with an Object Relational Mapping (ORM) tool or a weakness in the way that a developer used a persistence framework to inject his or her own SQL commands to be executed against the underlying database. The attack here is similar to plain SQL injection, except that the application does not use JDBC to directly talk to the database, but instead it uses a data access layer generated by an ORM tool or framework (e.g. Hibernate). While most of the time code generated by an ORM tool contains safe access methods that are immune to SQL injection, sometimes either due to some weakness in the generated code or due to the fact that the developer failed to use the generated access methods properly, SQL injection is still possible.
SQL Injection through SOAP Parameter Tampering
An attacker modifies the parameters of the SOAP message that is sent from the service consumer to the service provider to initiate a SQL injection attack. On the service provider side, the SOAP message is parsed and parameters are not properly validated before being used to access a database in a way that does not use parameter binding, thus enabling the attacker to control the structure of the executed SQL query. This pattern describes a SQL injection attack with the delivery mechanism being a SOAP message.
Expanding Control over the Operating System from the Database
An attacker is able to leverage access gained to the database to read / write data to the file system, compromise the operating system, create a tunnel for accessing the host machine, and use this access to potentially attack other machines on the same network as the database machine. Traditionally SQL injections attacks are viewed as a way to gain unauthorized read access to the data stored in the database, modify the data in the database, delete the data, etc. However, almost every data base management system (DBMS) system includes facilities that if compromised allow an attacker complete access to the file system, operating system, and full access to the host running the database. The attacker can then use this privileged access to launch subsequent attacks. These facilities include dropping into a command shell, creating user defined functions that can call system level libraries present on the host machine, stored procedures, etc.
SQL Injection
This attack exploits target software that constructs SQL statements based on user input. An attacker crafts input strings so that when the target software constructs SQL statements based on the input, the resulting SQL statement performs actions other than those the application intended. SQL Injection results from failure of the application to appropriately validate input. When specially crafted user-controlled input consisting of SQL syntax is used without proper validation as part of SQL queries, it is possible to glean information from the database in ways not envisaged during application design. Depending upon the database and the design of the application, it may also be possible to leverage injection to have the database execute system-related commands of the attackers' choice. SQL Injection enables an attacker to talk directly to the database, thus bypassing the application completely. Successful injection can cause information disclosure as well as ability to add or modify data in the database. In order to successfully inject SQL and retrieve information from a database, an attacker:

Nessus

NASL family	MacOS X Local Security Checks
NASL id	MACOS_10_14_3.NASL
description	The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.3. It is, therefore, affected by multiple vulnerabilities related to the following components: - AppleKeyStore - Bluetooth - Core Media - CoreAnimation - FaceTime - IOKit - Kernel - libxpc - Natural Language Processing - QuartzCore - SQLite - WebRTC Note that successful exploitation of the most serious issues can result in arbitrary code execution.
last seen	2020-06-01
modified	2020-06-02
plugin id	121393
published	2019-01-25
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/121393
title	macOS 10.14.x < 10.14.3 Multiple Vulnerabilities
code	# # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(121393); script_version("1.5"); script_cvs_date("Date: 2019/10/31 15:18:51"); script_cve_id( "CVE-2018-20346", "CVE-2018-20505", "CVE-2018-20506", "CVE-2019-6200", "CVE-2019-6202", "CVE-2019-6205", "CVE-2019-6208", "CVE-2019-6209", "CVE-2019-6210", "CVE-2019-6211", "CVE-2019-6213", "CVE-2019-6214", "CVE-2019-6218", "CVE-2019-6219", "CVE-2019-6220", "CVE-2019-6221", "CVE-2019-6224", "CVE-2019-6225", "CVE-2019-6230", "CVE-2019-6231", "CVE-2019-6235" ); script_bugtraq_id(106323, 106693, 106694); script_xref(name:"APPLE-SA", value:"APPLE-SA-2019-1-22-2"); script_name(english:"macOS 10.14.x < 10.14.3 Multiple Vulnerabilities"); script_summary(english:"Checks the version of Mac OS X / macOS."); script_set_attribute(attribute:"synopsis", value: "The remote host is missing a macOS update that fixes multiple security vulnerabilities."); script_set_attribute(attribute:"description", value: "The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.3. It is, therefore, affected by multiple vulnerabilities related to the following components: - AppleKeyStore - Bluetooth - Core Media - CoreAnimation - FaceTime - IOKit - Kernel - libxpc - Natural Language Processing - QuartzCore - SQLite - WebRTC Note that successful exploitation of the most serious issues can result in arbitrary code execution."); script_set_attribute(attribute:"see_also", value:"https://support.apple.com/en-us/HT209446"); # https://lists.apple.com/archives/security-announce/2019/Jan/msg00001.html script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?a77b9bea"); script_set_attribute(attribute:"solution", value: "Upgrade to macOS version 10.14.3 or later."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C"); script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-6218"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"exploited_by_malware", value:"true"); script_set_attribute(attribute:"vuln_publication_date", value:"2019/01/22"); script_set_attribute(attribute:"patch_publication_date", value:"2019/01/22"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/01/25"); script_set_attribute(attribute:"plugin_type", value:"combined"); script_set_attribute(attribute:"cpe", value:"cpe:/o:apple:mac_os_x"); script_set_attribute(attribute:"cpe", value:"cpe:/o:apple:macos"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"MacOS X Local Security Checks"); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("ssh_get_info.nasl", "os_fingerprint.nasl"); script_require_ports("Host/MacOSX/Version", "Host/OS"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); fix = "10.14.3"; minver = "10.14"; os = get_kb_item("Host/MacOSX/Version"); if (!os) { os = get_kb_item_or_exit("Host/OS"); if ("Mac OS X" >!< os) audit(AUDIT_OS_NOT, "macOS / Mac OS X"); c = get_kb_item("Host/OS/Confidence"); if (c <= 70) exit(1, "Can't determine the host's OS with sufficient confidence."); } if (!os) audit(AUDIT_OS_NOT, "macOS / Mac OS X"); matches = pregmatch(pattern:"Mac OS X ([0-9]+(\.[0-9]+)+)", string:os); if (empty_or_null(matches)) exit(1, "Failed to parse the macOS / Mac OS X version ('" + os + "')."); version = matches[1]; if (ver_compare(ver:version, minver:minver, fix:fix, strict:FALSE) == -1) { security_report_v4( port:0, severity:SECURITY_HOLE, extra: '\n Installed version : ' + version + '\n Fixed version : ' + fix + '\n' ); } else audit(AUDIT_INST_VER_NOT_VULN, "macOS / Mac OS X", version);

NASL family	Ubuntu Local Security Checks
NASL id	UBUNTU_USN-4019-1.NASL
description	It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-2518, CVE-2017-2520) It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-20505) It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-20346, CVE-2018-20506) It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive information. (CVE-2019-8457) It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2019-9936) It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2019-9937) It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-6153) It was discovered that SQLite incorrectly handled certain databases. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-10989) It was discovered that SQLite incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-13685) It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-2519). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	126065
published	2019-06-20
reporter	Ubuntu Security Notice (C) 2019-2020 Canonical, Inc. / NASL script (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/126065
title	Ubuntu 16.04 LTS / 18.04 LTS / 18.10 / 19.04 : sqlite3 vulnerabilities (USN-4019-1)
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Ubuntu Security Notice USN-4019-1. The text # itself is copyright (C) Canonical, Inc. See # <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered # trademark of Canonical, Inc. # include("compat.inc"); if (description) { script_id(126065); script_version("1.3"); script_cvs_date("Date: 2020/01/10"); script_cve_id("CVE-2016-6153", "CVE-2017-10989", "CVE-2017-13685", "CVE-2017-2518", "CVE-2017-2519", "CVE-2017-2520", "CVE-2018-20346", "CVE-2018-20505", "CVE-2018-20506", "CVE-2019-8457", "CVE-2019-9936", "CVE-2019-9937"); script_xref(name:"USN", value:"4019-1"); script_name(english:"Ubuntu 16.04 LTS / 18.04 LTS / 18.10 / 19.04 : sqlite3 vulnerabilities (USN-4019-1)"); script_summary(english:"Checks dpkg output for updated packages."); script_set_attribute( attribute:"synopsis", value: "The remote Ubuntu host is missing one or more security-related patches." ); script_set_attribute( attribute:"description", value: "It was discovered that SQLite incorrectly handled certain SQL files. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-2518, CVE-2017-2520) It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-20505) It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-20346, CVE-2018-20506) It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to access sensitive information. (CVE-2019-8457) It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2019-9936) It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2019-9937) It was discovered that SQLite incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-6153) It was discovered that SQLite incorrectly handled certain databases. An attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-10989) It was discovered that SQLite incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-13685) It was discovered that SQLite incorrectly handled certain queries. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-2519). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://usn.ubuntu.com/4019-1/" ); script_set_attribute( attribute:"solution", value:"Update the affected libsqlite3-0 and / or sqlite3 packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libsqlite3-0"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:sqlite3"); script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04"); script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts"); script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.10"); script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:19.04"); script_set_attribute(attribute:"vuln_publication_date", value:"2016/09/26"); script_set_attribute(attribute:"patch_publication_date", value:"2019/06/19"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/06/20"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"Ubuntu Security Notice (C) 2019-2020 Canonical, Inc. / NASL script (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Ubuntu Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("ubuntu.inc"); include("misc_func.inc"); if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/Ubuntu/release"); if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu"); release = chomp(release); if (! preg(pattern:"^(16\.04\|18\.04\|18\.10\|19\.04)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 16.04 / 18.04 / 18.10 / 19.04", "Ubuntu " + release); if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu); flag = 0; if (ubuntu_check(osver:"16.04", pkgname:"libsqlite3-0", pkgver:"3.11.0-1ubuntu1.2")) flag++; if (ubuntu_check(osver:"16.04", pkgname:"sqlite3", pkgver:"3.11.0-1ubuntu1.2")) flag++; if (ubuntu_check(osver:"18.04", pkgname:"libsqlite3-0", pkgver:"3.22.0-1ubuntu0.1")) flag++; if (ubuntu_check(osver:"18.04", pkgname:"sqlite3", pkgver:"3.22.0-1ubuntu0.1")) flag++; if (ubuntu_check(osver:"18.10", pkgname:"libsqlite3-0", pkgver:"3.24.0-1ubuntu0.1")) flag++; if (ubuntu_check(osver:"18.10", pkgname:"sqlite3", pkgver:"3.24.0-1ubuntu0.1")) flag++; if (ubuntu_check(osver:"19.04", pkgname:"libsqlite3-0", pkgver:"3.27.2-2ubuntu0.1")) flag++; if (ubuntu_check(osver:"19.04", pkgname:"sqlite3", pkgver:"3.27.2-2ubuntu0.1")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : ubuntu_report_get() ); exit(0); } else { tested = ubuntu_pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libsqlite3-0 / sqlite3"); }

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2020-1364.NASL
description	According to the versions of the sqlite packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.(CVE-2019-9937) - In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c.(CVE-2019-9936) - zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.(CVE-2019-19925) - SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.(CVE-2019-19924) - flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).(CVE-2019-19923) - multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.(CVE-2019-19926) - selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.(CVE-2019-20218) - ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded
last seen	2020-04-07
modified	2020-04-02
plugin id	135151
published	2020-04-02
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/135151
title	EulerOS Virtualization for ARM 64 3.0.6.0 : sqlite (EulerOS-SA-2020-1364)
code	# # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(135151); script_version("1.2"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/04/06"); script_cve_id( "CVE-2018-20505", "CVE-2019-19923", "CVE-2019-19924", "CVE-2019-19925", "CVE-2019-19926", "CVE-2019-19959", "CVE-2019-20218", "CVE-2019-9936", "CVE-2019-9937", "CVE-2020-9327" ); script_name(english:"EulerOS Virtualization for ARM 64 3.0.6.0 : sqlite (EulerOS-SA-2020-1364)"); script_summary(english:"Checks the rpm output for the updated packages."); script_set_attribute(attribute:"synopsis", value: "The remote EulerOS Virtualization for ARM 64 host is missing multiple security updates."); script_set_attribute(attribute:"description", value: "According to the versions of the sqlite packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In SQLite 3.27.2, interleaving reads and writes in a single transaction with an fts5 virtual table will lead to a NULL Pointer Dereference in fts5ChunkIterate in sqlite3.c. This is related to ext/fts5/fts5_hash.c and ext/fts5/fts5_index.c.(CVE-2019-9937) - In SQLite 3.27.2, running fts5 prefix queries inside a transaction could trigger a heap-based buffer over-read in fts5HashEntrySort in sqlite3.c, which may lead to an information leak. This is related to ext/fts5/fts5_hash.c.(CVE-2019-9936) - zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.(CVE-2019-19925) - SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.(CVE-2019-19924) - flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).(CVE-2019-19923) - multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.(CVE-2019-19926) - selectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a parsing error.(CVE-2019-20218) - ext/misc/zipfile.c in SQLite 3.30.1 mishandles certain uses of INSERT INTO in situations involving embedded '\0' characters in filenames, leading to a memory-management error that can be detected by (for example) valgrind.(CVE-2019-19959) - SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).(CVE-2018-20505) - In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.(CVE-2020-9327) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues."); # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2020-1364 script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?75596371"); script_set_attribute(attribute:"solution", value: "Update the affected sqlite packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-9936"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"patch_publication_date", value:"2020/04/02"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/04/02"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:sqlite"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:sqlite-libs"); script_set_attribute(attribute:"cpe", value:"cpe:/o:huawei:euleros:uvp:3.0.6.0"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"Huawei Local Security Checks"); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/EulerOS/release", "Host/EulerOS/rpm-list", "Host/EulerOS/uvp_version"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/EulerOS/release"); if (isnull(release) \|\| release !~ "^EulerOS") audit(AUDIT_OS_NOT, "EulerOS"); uvp = get_kb_item("Host/EulerOS/uvp_version"); if (uvp != "3.0.6.0") audit(AUDIT_OS_NOT, "EulerOS Virtualization 3.0.6.0"); if (!get_kb_item("Host/EulerOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "aarch64" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "EulerOS", cpu); if ("aarch64" >!< cpu) audit(AUDIT_ARCH_NOT, "aarch64", cpu); flag = 0; pkgs = ["sqlite-3.24.0-2.h12.eulerosv2r8", "sqlite-libs-3.24.0-2.h12.eulerosv2r8"]; foreach (pkg in pkgs) if (rpm_check(release:"EulerOS-2.0", reference:pkg)) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_WARNING, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "sqlite"); }

NASL family	Windows
NASL id	ITUNES_12_9_3.NASL
description	The version of Apple iTunes installed on the remote Windows host is prior to 12.9.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209450 advisory: - Multiple vulnerabilities exist due to input processing flaws in the WebKit component. An attacker may be able to leverage one of these vulnerability, by providing maliciously crafted web content, to execute arbitrary code on the host. (CVE-2019-6212, CVE-2019-6215, CVE-2019-6216, CVE-2019-6217, CVE-2019-6226, CVE-2019-6227, CVE-2019-6233, CVE-2019-6234) - A universal cross-site scripting vulnerability exists in the WebKit component. An attacker may be able to leverage this vulnerability, by providing maliciously crafted web content, to execute arbitrary script code in the security context of any site. (CVE-2019-6229) - A memory corruption vulnerability exists in the AppleKeyStore component. An attacker may be able to leverage this vulnerability to allow a process to circumvent sandbox restrictions. (CVE-2019-6235) - An out-of-bounds read vulnerability exists in the Core Media component. An attacker may be able to leverage this vulnerability to allow a malicious application to elevate its privileges. (CVE-2019-6221) - Multiple memory corruption issues exist in the SQLite component. An attacker may be able to leverage these vulnerabilities, by executing a malicious SQL query, to execute arbitrary code on the host. (CVE-2018-20346, CVE-2018-20505, CVE-2018-20506) Note that Nessus has not tested for this issue but has instead relied only on the application
last seen	2020-06-01
modified	2020-06-02
plugin id	121473
published	2019-01-30
reporter	This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/121473
title	Apple iTunes < 12.9.3 Multiple Vulnerabilities (credentialed check)
code	# # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(121473); script_version("1.4"); script_cvs_date("Date: 2019/10/31 15:18:52"); script_cve_id( "CVE-2018-20346", "CVE-2018-20505", "CVE-2018-20506", "CVE-2019-6212", "CVE-2019-6215", "CVE-2019-6216", "CVE-2019-6217", "CVE-2019-6221", "CVE-2019-6226", "CVE-2019-6227", "CVE-2019-6229", "CVE-2019-6233", "CVE-2019-6234", "CVE-2019-6235" ); script_bugtraq_id( 106323, 106691, 106694, 106696, 106698, 106699, 106724 ); script_xref(name:"APPLE-SA", value:"APPLE-SA-2019-1-24-1"); script_name(english:"Apple iTunes < 12.9.3 Multiple Vulnerabilities (credentialed check)"); script_summary(english:"Checks the version of iTunes on Windows"); script_set_attribute(attribute:"synopsis", value: "An application installed on remote host is affected by multiple vulnerabilities"); script_set_attribute(attribute:"description", value: "The version of Apple iTunes installed on the remote Windows host is prior to 12.9.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209450 advisory: - Multiple vulnerabilities exist due to input processing flaws in the WebKit component. An attacker may be able to leverage one of these vulnerability, by providing maliciously crafted web content, to execute arbitrary code on the host. (CVE-2019-6212, CVE-2019-6215, CVE-2019-6216, CVE-2019-6217, CVE-2019-6226, CVE-2019-6227, CVE-2019-6233, CVE-2019-6234) - A universal cross-site scripting vulnerability exists in the WebKit component. An attacker may be able to leverage this vulnerability, by providing maliciously crafted web content, to execute arbitrary script code in the security context of any site. (CVE-2019-6229) - A memory corruption vulnerability exists in the AppleKeyStore component. An attacker may be able to leverage this vulnerability to allow a process to circumvent sandbox restrictions. (CVE-2019-6235) - An out-of-bounds read vulnerability exists in the Core Media component. An attacker may be able to leverage this vulnerability to allow a malicious application to elevate its privileges. (CVE-2019-6221) - Multiple memory corruption issues exist in the SQLite component. An attacker may be able to leverage these vulnerabilities, by executing a malicious SQL query, to execute arbitrary code on the host. (CVE-2018-20346, CVE-2018-20505, CVE-2018-20506) Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number."); script_set_attribute(attribute:"see_also", value:"https://support.apple.com/en-us/HT209450"); script_set_attribute(attribute:"solution", value: "Upgrade to Apple iTunes version 12.9.3 or later."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-6235"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"vuln_publication_date", value:"2019/01/24"); script_set_attribute(attribute:"patch_publication_date", value:"2019/01/24"); script_set_attribute(attribute:"plugin_publication_date", value:"2019/01/30"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/a:apple:itunes"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"Windows"); script_copyright(english:"This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("itunes_detect.nasl"); script_require_keys("installed_sw/iTunes Version", "SMB/Registry/Enumerated"); exit(0); } include("vcf.inc"); get_kb_item_or_exit("SMB/Registry/Enumerated"); app_info = vcf::get_app_info(app:"iTunes Version", win_local:TRUE); constraints = [{"fixed_version":"12.9.3"}]; vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE, flags:{xss:TRUE});

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Nessus

References