Tenable Nessus and Nessus Enterprise are affected by two recently patched vulnerabilities in SQLite: SQLite resolve_backslashes() Function .\ Command Handling Off-by-one Remote Heap Buffer Overflow: SQLite contains an off-by-one overflow condition in the resolve_backslashes() function. The issue is triggered as user-supplied input is not properly validated when handling .\ commands. This may allow a remote attacker to cause a limited heap-based buffer overflow, resulting in a denial of service or potentially execution of arbitrary code. SQLite sqlite3VdbeExec() Function Database File Handling Heap Buffer Overflow: SQLite contains an overflow condition in the sqlite3VdbeExec() function. The issue is triggered as user-supplied input is not properly validated when handling database files. This may allow a context-dependent attacker to cause a heap-based buffer overflow, resulting in a denial of service or potentially allowing the execution of arbitrary code. While Tenable has not confirmed this is exploitable, we have upgraded the software to use the latest version of SQLite as a precaution. Please note that Tenable strongly recommends that Nessus be installed on a subnet that is not Internet addressable.
Vulmon