Ubuntu: Security Advisory (USN-4394-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : SQLite vulnerabilities (USN-4394-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4394-1 advisory. It was discovered that SQLite incorrectly handled certain corruped schemas. An attacker could possibly use this issue to cause a...

USN-4394-1: SQLite vulnerabilities

It was discovered that SQLite incorrectly handled certain corruped schemas. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. CVE-2018-8740 It was discovered that SQLite incorrectly handled certain SELECT statements. An attacker cou...

Photon OS 1.0: Sqlite PHSA-2020-1.0-0298

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0298. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13732...

Photon OS 2.0: Sqlite PHSA-2020-2.0-0249

An update of the sqlite package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0249. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13719...

Photon OS 3.0: Sqlite PHSA-2020-3.0-0101

An update of the sqlite package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0101. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137188;...

Fedora 32 : sqlite (2020-0477f8840e)

Rebase to version 3.32.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Securit...

several security issues in sqlite3

sqlite3 update: Various security issues could be used by an attacker to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2020-11655: SQLite through 3.31.1 allows attackers to cause a denial of service segmentation fault via a malformed window-functi...

DEBIAN-CVE-2020-13434

SQLite through 3.32.0 has an integer overflow in sqlite3strvappendf in printf.c...

AZL-38614 CVE-2020-13434 affecting package ceph for versions less than 18.2.1-1

SQLite through 3.32.0 has an integer overflow in sqlite3strvappendf in printf.c...

CVE-2020-13434

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c (CVE-2020-13434). Affected versions are up to 3.32.0; remediation is to update to SQLite 3.32.3. This fix is reflected in multiple advisories (e.g., Apple iOS/macOS security content HT211850/HT211935 noting SQLite u...

SQLite report about CVE-2020-13434

Malicious SQL statement involving the printf SQL function results in an integer overflow which can overwrite the stack with over 2 billion bytes of 0x30 or 0x20 ASCII '0' or ' '. Even though this is a stack overwrite, there is no known way to redirect control or otherwise escalate the level of...

CVE-2018-13434

CVE-2018-13434 affects the LINE iOS app (version 8.8.0). The vulnerability stems from the LAContext biometric validation path, where bypass is possible because the kSecAccessControlUserPresence protection is not used, allowing authentication with an arbitrary fingerprint. The issue enables a loca...