Vulnerabilities > CVE-2020-11655 - Improper Initialization vulnerability in multiple products

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

Vulnerable Configurations

Part	Description	Count
Application	Sqlite Sqlite Sqlite 1.0 Sqlite Sqlite 1.0.1 Sqlite Sqlite 1.0.3 Sqlite Sqlite 1.0.4 Sqlite Sqlite 1.0.5 Sqlite Sqlite 1.0.8 Sqlite Sqlite 1.0.9 Sqlite Sqlite 1.0.10 Sqlite Sqlite 1.0.12 Sqlite Sqlite 1.0.13 Sqlite Sqlite 1.0.14 Sqlite Sqlite 1.0.15 Sqlite Sqlite 1.0.16 Sqlite Sqlite 1.0.17 Sqlite Sqlite 1.0.18 Sqlite Sqlite 1.0.19 Sqlite Sqlite 1.0.20 Sqlite Sqlite 1.0.21 Sqlite Sqlite 1.0.22 Sqlite Sqlite 1.0.23 Sqlite Sqlite 1.0.24 Sqlite Sqlite 1.0.25 Sqlite Sqlite 1.0.26 Sqlite Sqlite 1.0.27 Sqlite Sqlite 1.0.28 Sqlite Sqlite 1.0.29 Sqlite Sqlite 1.0.30 Sqlite Sqlite 1.0.31 Sqlite Sqlite 1.0.32 Sqlite Sqlite 2.0.0 Sqlite Sqlite 2.0.1 Sqlite Sqlite 2.0.2 Sqlite Sqlite 2.0.3 Sqlite Sqlite 2.0.4 Sqlite Sqlite 2.0.5 Sqlite Sqlite 2.0.6 Sqlite Sqlite 2.0.7 Sqlite Sqlite 2.0.8 Sqlite Sqlite 2.1.0 Sqlite Sqlite 2.1.1 Sqlite Sqlite 2.1.2 Sqlite Sqlite 2.1.3 Sqlite Sqlite 2.1.4 Sqlite Sqlite 2.1.5 Sqlite Sqlite 2.1.6 Sqlite Sqlite 2.1.7 Sqlite Sqlite 2.2.0 Sqlite Sqlite 2.2.1 Sqlite Sqlite 2.2.2 Sqlite Sqlite 2.2.3 Sqlite Sqlite 2.2.4 Sqlite Sqlite 2.2.5 Sqlite Sqlite 2.3.0 Sqlite Sqlite 2.3.1 Sqlite Sqlite 2.3.2 Sqlite Sqlite 2.3.3 Sqlite Sqlite 2.4.0 Sqlite Sqlite 2.4.1 Sqlite Sqlite 2.4.2 Sqlite Sqlite 2.4.3 Sqlite Sqlite 2.4.4 Sqlite Sqlite 2.4.5 Sqlite Sqlite 2.4.6 Sqlite Sqlite 2.4.7 Sqlite Sqlite 2.4.8 Sqlite Sqlite 2.4.9 Sqlite Sqlite 2.4.10 Sqlite Sqlite 2.4.11 Sqlite Sqlite 2.4.12 Sqlite Sqlite 2.5.0 Sqlite Sqlite 2.5.1 Sqlite Sqlite 2.5.2 Sqlite Sqlite 2.5.3 Sqlite Sqlite 2.5.4 Sqlite Sqlite 2.5.5 Sqlite Sqlite 2.5.6 Sqlite Sqlite 2.6.0 Sqlite Sqlite 2.6.1 Sqlite Sqlite 2.6.2 Sqlite Sqlite 2.6.3 Sqlite Sqlite 2.7.0 Sqlite Sqlite 2.7.1 Sqlite Sqlite 2.7.2 Sqlite Sqlite 2.7.3 Sqlite Sqlite 2.7.4 Sqlite Sqlite 2.7.5 Sqlite Sqlite 2.7.6 Sqlite Sqlite 2.8.0 Sqlite Sqlite 2.8.1 Sqlite Sqlite 2.8.2 Sqlite Sqlite 2.8.3 Sqlite Sqlite 2.8.4 Sqlite Sqlite 2.8.5 Sqlite Sqlite 2.8.6 Sqlite Sqlite 2.8.7 Sqlite Sqlite 2.8.8 Sqlite Sqlite 2.8.9 Sqlite Sqlite 2.8.10 Sqlite Sqlite 2.8.11 Sqlite Sqlite 2.8.12 Sqlite Sqlite 2.8.13 Sqlite Sqlite 2.8.14 Sqlite Sqlite 2.8.15 Sqlite Sqlite 2.8.16 Sqlite Sqlite 2.8.17 Sqlite Sqlite 3.0.0 Sqlite Sqlite 3.0.1 Sqlite Sqlite 3.0.2 Sqlite Sqlite 3.0.3 Sqlite Sqlite 3.0.4 Sqlite Sqlite 3.0.5 Sqlite Sqlite 3.0.6 Sqlite Sqlite 3.0.7 Sqlite Sqlite 3.0.8 Sqlite Sqlite 3.1.0 Sqlite Sqlite 3.1.1 Sqlite Sqlite 3.1.2 Sqlite Sqlite 3.1.3 Sqlite Sqlite 3.1.3.1 Sqlite Sqlite 3.1.4 Sqlite Sqlite 3.1.5 Sqlite Sqlite 3.1.6 Sqlite Sqlite 3.2.0 Sqlite Sqlite 3.2.1 Sqlite Sqlite 3.2.2 Sqlite Sqlite 3.2.3 Sqlite Sqlite 3.2.4 Sqlite Sqlite 3.2.5 Sqlite Sqlite 3.2.6 Sqlite Sqlite 3.2.7 Sqlite Sqlite 3.2.8 Sqlite Sqlite 3.3.0 Sqlite Sqlite 3.3.1 Sqlite Sqlite 3.3.2 Sqlite Sqlite 3.3.3 Sqlite Sqlite 3.3.4 Sqlite Sqlite 3.3.5 Sqlite Sqlite 3.3.6 Sqlite Sqlite 3.3.7 Sqlite Sqlite 3.3.8 Sqlite Sqlite 3.3.9 Sqlite Sqlite 3.3.10 Sqlite Sqlite 3.3.11 Sqlite Sqlite 3.3.12 Sqlite Sqlite 3.3.13 Sqlite Sqlite 3.3.14 Sqlite Sqlite 3.3.15 Sqlite Sqlite 3.3.16 Sqlite Sqlite 3.3.17 Sqlite Sqlite 3.4.0 Sqlite Sqlite 3.4.1 Sqlite Sqlite 3.4.2 Sqlite Sqlite 3.5.0 Sqlite Sqlite 3.5.1 Sqlite Sqlite 3.5.2 Sqlite Sqlite 3.5.3 Sqlite Sqlite 3.5.4 Sqlite Sqlite 3.5.5 Sqlite Sqlite 3.5.6 Sqlite Sqlite 3.5.7 Sqlite Sqlite 3.5.8 Sqlite Sqlite 3.5.9 Sqlite Sqlite 3.6.0 Sqlite Sqlite 3.6.1 Sqlite Sqlite 3.6.2 Sqlite Sqlite 3.6.3 Sqlite Sqlite 3.6.4 Sqlite Sqlite 3.6.5 Sqlite Sqlite 3.6.6 Sqlite Sqlite 3.6.6.1 Sqlite Sqlite 3.6.6.2 Sqlite Sqlite 3.6.7 Sqlite Sqlite 3.6.8 Sqlite Sqlite 3.6.9 Sqlite Sqlite 3.6.10 Sqlite Sqlite 3.6.11 Sqlite Sqlite 3.6.12 Sqlite Sqlite 3.6.13 Sqlite Sqlite 3.6.14 Sqlite Sqlite 3.6.14.1 Sqlite Sqlite 3.6.14.2 Sqlite Sqlite 3.6.15 Sqlite Sqlite 3.6.16 Sqlite Sqlite 3.6.16.1 Sqlite Sqlite 3.6.17 Sqlite Sqlite 3.6.18 Sqlite Sqlite 3.6.19 Sqlite Sqlite 3.6.20 Sqlite Sqlite 3.6.21 Sqlite Sqlite 3.6.22 Sqlite Sqlite 3.6.23 Sqlite Sqlite 3.6.23.1 Sqlite Sqlite 3.7.0 Sqlite Sqlite 3.7.0.1 Sqlite Sqlite 3.7.1 Sqlite Sqlite 3.7.2 Sqlite Sqlite 3.7.3 Sqlite Sqlite 3.7.4 Sqlite Sqlite 3.7.5 Sqlite Sqlite 3.7.6 Sqlite Sqlite 3.7.6.1 Sqlite Sqlite 3.7.6.2 Sqlite Sqlite 3.7.6.3 Sqlite Sqlite 3.7.7 Sqlite Sqlite 3.7.7.1 Sqlite Sqlite 3.7.8 Sqlite Sqlite 3.7.9 Sqlite Sqlite 3.7.10 Sqlite Sqlite 3.7.11 Sqlite Sqlite 3.7.12 Sqlite Sqlite 3.7.12.1 Sqlite Sqlite 3.7.13 Sqlite Sqlite 3.7.14 Sqlite Sqlite 3.7.14.1 Sqlite Sqlite 3.7.15 Sqlite Sqlite 3.7.15.1 Sqlite Sqlite 3.7.15.2 Sqlite Sqlite 3.7.16 Sqlite Sqlite 3.7.16.1 Sqlite Sqlite 3.7.16.2 Sqlite Sqlite 3.7.17 Sqlite Sqlite 3.8.0 Sqlite Sqlite 3.8.0.1 Sqlite Sqlite 3.8.0.2 Sqlite Sqlite 3.8.1 Sqlite Sqlite 3.8.2 Sqlite Sqlite 3.8.3 Sqlite Sqlite 3.8.3.1 Sqlite Sqlite 3.8.4 Sqlite Sqlite 3.8.4.1 Sqlite Sqlite 3.8.4.2 Sqlite Sqlite 3.8.4.3 Sqlite Sqlite 3.8.5 Sqlite Sqlite 3.8.6 Sqlite Sqlite 3.8.6.1 Sqlite Sqlite 3.8.7 Sqlite Sqlite 3.8.7.1 Sqlite Sqlite 3.8.7.2 Sqlite Sqlite 3.8.7.3 Sqlite Sqlite 3.8.7.4 Sqlite Sqlite 3.8.8 Sqlite Sqlite 3.8.8.1 Sqlite Sqlite 3.8.8.2 Sqlite Sqlite 3.8.8.3 Sqlite Sqlite 3.8.9 Sqlite Sqlite 3.8.10 Sqlite Sqlite 3.8.10.1 Sqlite Sqlite 3.8.10.2 Sqlite Sqlite 3.8.11 Sqlite Sqlite 3.8.11.1 Sqlite Sqlite 3.9.0 Sqlite Sqlite 3.9.1 Sqlite Sqlite 3.9.2 Sqlite Sqlite 3.9.3 Sqlite Sqlite 3.10.0 Sqlite Sqlite 3.10.1 Sqlite Sqlite 3.10.2 Sqlite Sqlite 3.11.0 Sqlite Sqlite 3.11.1 Sqlite Sqlite 3.12.0 Sqlite Sqlite 3.12.1 Sqlite Sqlite 3.12.2 Sqlite Sqlite 3.13.0 Sqlite Sqlite 3.14 Sqlite Sqlite 3.14.1 Sqlite Sqlite 3.14.2 Sqlite Sqlite 3.15.0 Sqlite Sqlite 3.15.1 Sqlite Sqlite 3.15.2 Sqlite Sqlite 3.16.0 Sqlite Sqlite 3.16.1 Sqlite Sqlite 3.16.2 Sqlite Sqlite 3.17.0 Sqlite Sqlite 3.18.0 Sqlite Sqlite 3.18.1 Sqlite Sqlite 3.18.2 Sqlite Sqlite 3.19.0 Sqlite Sqlite 3.19.1 Sqlite Sqlite 3.19.2 Sqlite Sqlite 3.19.3 Sqlite Sqlite 3.20.0 Sqlite Sqlite 3.20.1 Sqlite Sqlite 3.21.0 Sqlite Sqlite 3.22.0 Sqlite Sqlite 3.23.0 Sqlite Sqlite 3.23.1 Sqlite Sqlite 3.24.0 Sqlite Sqlite 3.25.0 Sqlite Sqlite 3.25.1 Sqlite Sqlite 3.25.02 Sqlite Sqlite 3.25.2 Sqlite Sqlite 3.25.3 Sqlite Sqlite 3.26.0 Sqlite Sqlite 3.27.0 Sqlite Sqlite 3.27.1 Sqlite Sqlite 3.27.2 Sqlite Sqlite 3.28.0 Sqlite Sqlite 3.29.0 Sqlite Sqlite 3.30.0 Sqlite Sqlite 3.30.1 Sqlite Sqlite 3.31.0 Sqlite Sqlite 3.31.1	302
Application	Netapp Netapp Ontap Select Deploy Administration Utility -	1
Application	Oracle Oracle Communications Element Manager 8.2.0 Oracle Communications Element Manager 8.2.0.0 Oracle Communications Element Manager 8.2.1 Oracle Communications Element Manager 8.2.2 Oracle Communications Network Charging AND Control 6.0.1 Oracle Communications Network Charging AND Control 12.0.0 Oracle Communications Network Charging AND Control 12.0.1.0 Oracle Communications Network Charging AND Control 12.0.2 Oracle Communications Network Charging AND Control 12.0.3 Oracle Communications Session Report Manager 8.2.0 Oracle Communications Session Report Manager 8.2.1 Oracle Communications Session Report Manager 8.2.2 Oracle Communications Session Route Manager 8.2.0 Oracle Communications Session Route Manager 8.2.0.0 Oracle Communications Session Route Manager 8.2.1 Oracle Communications Session Route Manager 8.2.2 Oracle Enterprise Manager OPS Center 12.4.0.0 Oracle Hyperion Infrastructure Technology 11.1.2.4 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Mysql 8.0.0 Oracle Mysql 8.0.1 Oracle Mysql 8.0.2 Oracle Mysql 8.0.3 Oracle Mysql 8.0.4 Oracle Mysql 8.0.5 Oracle Mysql 8.0.10 Oracle Mysql 8.0.11 Oracle Mysql 8.0.12 Oracle Mysql 8.0.13 Oracle Mysql 8.0.14 Oracle Mysql 8.0.15 Oracle Mysql 8.0.16 Oracle Mysql 8.0.17 Oracle Mysql 8.0.18 Oracle Mysql 8.0.19 Oracle Mysql 8.0.20 Oracle Mysql 8.0.21 Oracle Mysql 8.0.22 Oracle Mysql Workbench - Oracle Mysql Workbench 5.2.47 Oracle Mysql Workbench 6.0.9 Oracle Mysql Workbench 6.1.7 Oracle Mysql Workbench 6.2.5 Oracle Mysql Workbench 6.3.8 Oracle Mysql Workbench 6.3.10 Oracle Mysql Workbench 8.0.12 Oracle Mysql Workbench 8.0.13 Oracle Mysql Workbench 8.0.14 Oracle Mysql Workbench 8.0.15 Oracle Mysql Workbench 8.0.16 Oracle Mysql Workbench 8.0.17 Oracle Mysql Workbench 8.0.18 Oracle Mysql Workbench 8.0.19 Oracle Mysql Workbench 8.0.20 Oracle Mysql Workbench 8.0.21 Oracle Mysql Workbench 8.0.22 Oracle Outside IN Technology 8.5.4 Oracle Outside IN Technology 8.5.5 Oracle ZFS Storage Appliance KIT 8.8	61
Application	Siemens Siemens Sinec Infrastructure Network Services *	1
Application	Tenable Tenable Tenable.Sc - Tenable Tenable.Sc 5.13.0 Tenable Tenable.Sc 5.14.0 Tenable Tenable.Sc 5.14.1 Tenable Tenable.Sc 5.16.0 Tenable Tenable.Sc 5.17.0 Tenable Tenable.Sc 5.18.0 Tenable Tenable.Sc 5.19.0	8
OS	Debian Debian Debian Linux 8.0 Debian Debian Linux 9.0	2
OS	Canonical Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.10 Canonical Ubuntu Linux 20.04	4
OS	Oracle Oracle Communications Messaging Server 8.1	1

Common Weakness Enumeration (CWE)

CWE-665 - Improper Initialization

Common Attack Pattern Enumeration and Classification (CAPEC)

Leveraging Race Conditions
This attack targets a race condition occurring when multiple processes access and manipulate the same resource concurrently and the outcome of the execution depends on the particular order in which the access takes place. The attacker can leverage a race condition by "running the race", modifying the resource and modifying the normal execution flow. For instance a race condition can occur while accessing a file, the attacker can trick the system by replacing the original file with his version and cause the system to read the malicious file.
Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
This attack targets a race condition occurring between the time of check (state) for a resource and the time of use of a resource. The typical example is the file access. The attacker can leverage a file access race condition by "running the race", meaning that he would modify the resource between the first time the target program accesses the file and the time the target program uses the file. During that period of time, the attacker could do something such as replace the file and cause an escalation of privilege.

Nessus

NASL family	PhotonOS Local Security Checks
NASL id	PHOTONOS_PHSA-2020-1_0-0289_SQLITE.NASL
description	An update of the sqlite package has been released.
last seen	2020-04-30
modified	2020-04-28
plugin id	136037
published	2020-04-28
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/136037
title	Photon OS 1.0: Sqlite PHSA-2020-1.0-0289
code	# # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from VMware Security Advisory PHSA-2020-1.0-0289. The text # itself is copyright (C) VMware, Inc. include('compat.inc'); if (description) { script_id(136037); script_version("1.2"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/04/29"); script_cve_id("CVE-2020-9327", "CVE-2020-11655", "CVE-2020-11656"); script_name(english:"Photon OS 1.0: Sqlite PHSA-2020-1.0-0289"); script_set_attribute(attribute:"synopsis", value: "The remote PhotonOS host is missing multiple security updates."); script_set_attribute(attribute:"description", value: "An update of the sqlite package has been released."); script_set_attribute(attribute:"see_also", value:"https://github.com/vmware/photon/wiki/Security-Updates-1.0-289.md"); script_set_attribute(attribute:"solution", value: "Update the affected Linux packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2020-11656"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"vuln_publication_date", value:"2020/02/21"); script_set_attribute(attribute:"patch_publication_date", value:"2020/04/21"); script_set_attribute(attribute:"plugin_publication_date", value:"2020/04/28"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:vmware:photonos:sqlite"); script_set_attribute(attribute:"cpe", value:"cpe:/o:vmware:photonos:1.0"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"PhotonOS Local Security Checks"); script_copyright(english:"This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/PhotonOS/release", "Host/PhotonOS/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/PhotonOS/release"); if (isnull(release) \|\| release !~ "^VMware Photon") audit(AUDIT_OS_NOT, "PhotonOS"); if (release !~ "^VMware Photon (?:Linux\|OS) 1\.0(\D\|$)") audit(AUDIT_OS_NOT, "PhotonOS 1.0"); if (!get_kb_item("Host/PhotonOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "aarch64" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "PhotonOS", cpu); flag = 0; if (rpm_check(release:"PhotonOS-1.0", cpu:"x86_64", reference:"sqlite-autoconf-3.31.1-3.ph1")) flag++; if (rpm_check(release:"PhotonOS-1.0", cpu:"x86_64", reference:"sqlite-autoconf-debuginfo-3.31.1-3.ph1")) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "sqlite"); }

NASL family	PhotonOS Local Security Checks
NASL id	PHOTONOS_PHSA-2020-3_0-0081_SQLITE.NASL
description	An update of the sqlite package has been released.
last seen	2020-04-30
modified	2020-04-21
plugin id	135778
published	2020-04-21
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/135778
title	Photon OS 3.0: Sqlite PHSA-2020-3.0-0081

NASL family	Ubuntu Local Security Checks
NASL id	UBUNTU_USN-4394-1.NASL
description	It was discovered that SQLite incorrectly handled certain corruped schemas. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-8740) It was discovered that SQLite incorrectly handled certain SELECT statements. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10. (CVE-2019-19603) It was discovered that SQLite incorrectly handled certain self-referential views. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10. (CVE-2019-19645) Henry Liu discovered that SQLite incorrectly handled certain malformed window-function queries. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-11655) It was discovered that SQLite incorrectly handled certain string operations. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-13434) It was discovered that SQLite incorrectly handled certain expressions. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-13435) It was discovered that SQLite incorrectly handled certain fts3 queries. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-13630) It was discovered that SQLite incorrectly handled certain virtual table names. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 19.10 and Ubuntu 20.04 LTS. (CVE-2020-13631) It was discovered that SQLite incorrectly handled certain fts3 queries. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2020-13632). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-12
modified	2020-06-11
plugin id	137353
published	2020-06-11
reporter	Ubuntu Security Notice (C) 2020 Canonical, Inc. / NASL script (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/137353
title	Ubuntu 16.04 LTS / 18.04 LTS / 19.10 / 20.04 : sqlite3 vulnerabilities (USN-4394-1)

NASL family	Debian Local Security Checks
NASL id	DEBIAN_DLA-2203.NASL
description	It was discovered that there was a denial of service attack in the SQLite database, often embedded into other programs and servers. In the event of a semantic error in an aggregate query, SQLite did not return early from the
last seen	2020-05-12
modified	2020-05-07
plugin id	136368
published	2020-05-07
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/136368
title	Debian DLA-2203-1 : sqlite3 security update

NASL family	PhotonOS Local Security Checks
NASL id	PHOTONOS_PHSA-2020-2_0-0231_SQLITE.NASL
description	An update of the sqlite package has been released.
last seen	2020-04-30
modified	2020-04-22
plugin id	135907
published	2020-04-22
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/135907
title	Photon OS 2.0: Sqlite PHSA-2020-2.0-0231

NASL family	Huawei Local Security Checks
NASL id	EULEROS_SA-2020-1512.NASL
description	According to the version of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object
last seen	2020-05-03
modified	2020-04-20
plugin id	135745
published	2020-04-20
reporter	This script is Copyright (C) 2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/135745
title	EulerOS 2.0 SP8 : sqlite (EulerOS-SA-2020-1512)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Nessus

References