SQLite <= 3.51.1 Information Disclosure

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(303594);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/04/20");

  script_cve_id("CVE-2025-70873");
  script_xref(name:"IAVA", value:"2026-A-0245");

  script_name(english:"SQLite <= 3.51.1 Information Disclosure");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"The version of SQLite installed on the remote host is prior to 3.51.2. It is, therefore, affected
by an information disclosure issue where the zipfileInflate function, responsible for decompressing ZIP 
file contents, fails to properly validate or sanitize data during the inflation process. When processing 
a maliciously crafted ZIP file, the function can be manipulated to return uninitialized or adjacent heap 
memory contents to the caller, effectively leaking sensitive information from the application's 
memory space.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.sqlite.org/cves.html");
  # https://gist.github.com/cnwangjihe/f496393f30f5ecec5b18c8f5ab072054
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?56362c62");
  script_set_attribute(attribute:"solution", value:
"Upgrade to SQLite 3.51.2 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-70873");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/03/12");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/11/28");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/03/25");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:sqlite:sqlite");
  script_set_attribute(attribute:"stig_severity", value:"II");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("sqlite_nix_installed.nbin", "sqlite_win_installed.nbin");
  script_require_keys("installed_sw/SQLite");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'check_algorithm': 'default',
      'product': {'name': 'SQLite', 'type': 'app'},
      'constraints': [
        {
          'fixed_version': '3.51.2'
        }
      ] 
    }
  ]
};

var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:result);