SQLite < 3.50.2 Memory Corruption

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(242325);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/01/21");

  script_cve_id("CVE-2025-6965");
  script_xref(name:"IAVA", value:"2025-A-0529-S");

  script_name(english:"SQLite < 3.50.2 Memory Corruption");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is missing multiple security updates.");
  script_set_attribute(attribute:"description", value:
"The version of SQLite installed on the remote host is prior to 3.50.2. It is, therefore, affected
by a memory corruption issue. The vulnerability can occur where the number of aggregate terms could exceed the number of
columns available, leading to memory corruption.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.sqlite.org/cves.html");
  script_set_attribute(attribute:"solution", value:
"Upgrade to SQLite 3.50.2 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-6965");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/07/15");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/06/28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/07/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:sqlite:sqlite");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("sqlite_nix_installed.nbin", "sqlite_win_installed.nbin");
  script_require_keys("installed_sw/SQLite");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'requires': [
    {'scope': 'target', 'match_one': {'os': ['windows', 'linux']}}
  ],
  'checks': [
    {
      'check_algorithm': 'default',
      'product': {'name': 'SQLite', 'type': 'app'},
      'constraints': [
        {
          'fixed_version': '3.50.2'
        }
      ] 
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:result);