The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - sqlite: heap out-of-bound read in function rtreenode() (CVE-2019-8457)

  - The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows     remote attackers to execute arbitrary code or cause a denial of service (application crash) via a SQL     command that triggers an API call with a crafted pointer value in the second argument. (CVE-2015-7036)

  - os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which     might allow local users to obtain sensitive information, cause a denial of service (application crash), or     have unspecified other impact by leveraging use of the current working directory for temporary files.
    (CVE-2016-6153)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201612-21 (SQLite: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in SQLite. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.4. It is, therefore, affected multiple vulnerabilities in the following components :

  - Admin Framework
  - afpserver
  - apache
  - AppleFSCompression
  - AppleGraphicsControl
  - AppleThunderboltEDMService
  - ATS
  - Bluetooth
  - Certificate Trust Policy
  - CFNetwork HTTPAuthentication
  - CoreText
  - coreTLS
  - DiskImages
  - Display Drivers
  - EFI
  - FontParser
  - Graphics Driver
  - ImageIO
  - Install Framework Legacy
  - Intel Graphics Driver
  - IOAcceleratorFamily
  - IOFireWireFamily
  - Kernel
  - kext tools
  - Mail
  - ntfs
  - ntp
  - OpenSSL
  - QuickTime
  - Security
  - Spotlight
  - SQLite
  - System Stats
  - TrueTypeScaler
  - zip

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

远程主机受到 GLSA-201612-21 中所述漏洞的影响（SQLite：多个漏洞）在 SQLite 中发现多个漏洞。请检查下面引用的 CVE 标识符以了解详细信息。影响：远程攻击者可能以进程的权限执行任意代码，或者造成拒绝服务情况。解决方法：目前无任何已知的解决方法。

遠端主機受到 GLSA-201612-21 中所述的弱點影響 (SQLite：多個弱點) 在 SQLite 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：遠端攻擊者可能會以處理程序的權限執行任意程式碼，或是造成拒絕服務情形。因應措施：目前尚無已知的因應措施。

リモートホストは、GLSA-201612-21（SQLite：複数の脆弱性）で説明されている脆弱性による影響を受けます。SQLiteで、複数の脆弱性が見つかりました。詳細については、以下に記載されているCVE識別番号を参照してください。影響：リモートの攻撃者が、プロセスの権限で任意のコードを実行したり、サービス拒否状態を引き起こしたりする可能性があります。回避策：現時点では、既知の回避策はありません。

遠端主機執行的 Mac OS X 10.10.x 版本比 10.10.4 版舊。因此，其會受到下列元件中的多個弱點影響：

- Admin Framework
 - afpserver
 - apache
 - AppleFSCompression
 - AppleGraphicsControl
 - AppleThunderboltEDMService
 - ATS
 - Bluetooth
 - Certificate Trust Policy
 - CFNetwork HTTPAuthentication
 - CoreText
 - coreTLS
 - DiskImages
 - Display Drivers
 - EFI
 - FontParser
 - Graphics Driver
 - ImageIO
 - Install Framework Legacy
 - Intel Graphics Driver
 - IOAcceleratorFamily
 - IOFireWireFamily
 - Kernel
 - kext tools
 - Mail
 - ntfs
 - ntp
 - OpenSSL
 - QuickTime
 - Security
 - Spotlight
 - SQLite
 - System Stats
 - TrueTypeScaler
 - zip

請注意，如果成功惡意利用多數嚴重問題，將會導致任意程式碼執行。

远程主机运行的 Mac OS X 10.10.x 版本低于 10.10.4。因此，它受到以下组件中多种漏洞的影响：

- Admin Framework
 - afpserver
 - apache
 - AppleFSCompression
 - AppleGraphicsControl
 - AppleThunderboltEDMService
 - ATS
 - Bluetooth
 - Certificate Trust Policy
 - CFNetwork HTTPAuthentication
 - CoreText
 - coreTLS
 - DiskImages
 - Display Drivers
 - EFI
 - FontParser
 - Graphics Driver
 - ImageIO
 - Install Framework Legacy
 - Intel Graphics Driver
 - IOAcceleratorFamily
 - IOFireWireFamily
 - Kernel
 - kext tools
 - Mail
 - ntfs
 - ntp
 - OpenSSL
 - QuickTime
 - Security
 - Spotlight
 - SQLite
 - System Stats
 - TrueTypeScaler
 - zip

请注意，如果成功利用最严重的问题则可能导致执行任意代码。

リモートホストが、バージョン 10.10.4 より前の Mac OS X 10.10.x を実行しています。したがって、次のコンポーネントで複数の脆弱性による影響を受けます：

- Admin Framework
 - afpserver
 - apache
 - AppleFSCompression
 - AppleGraphicsControl
 - AppleThunderboltEDMService
 - ATS
 - Bluetooth
 - Certificate Trust Policy
 - CFNetwork HTTPAuthentication
 - CoreText
 - coreTLS
 - DiskImages
 - Display Drivers
 - EFI
 - FontParser
 - Graphics Driver
 - ImageIO
 - Install Framework Legacy
 - Intel Graphics Driver
 - IOAcceleratorFamily
 - IOFireWireFamily
 - Kernel
 - kext tools
 - Mail
 - ntfs
 - ntp
 - OpenSSL
 - QuickTime
 - Security
 - Spotlight
 - SQLite
 - System Stats
 - TrueTypeScaler
 - zip

注意：最も深刻な問題の悪用が成功すると、任意のコード実行が発生する可能性があります。

ID	Name	Product	Family	Published	Updated	Severity
199469	RHEL 7 : sqlite (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	6/3/2024	critical
95637	GLSA-201612-21 : SQLite: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	12/8/2016	1/11/2021	high
84488	Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)	Nessus	MacOS X Local Security Checks	7/1/2015	5/28/2024	critical
95637	GLSA-201612-21：SQLite：多个漏洞	Nessus	Gentoo Local Security Checks	12/8/2016	1/11/2021	high
95637	GLSA-201612-21：SQLite：多個弱點	Nessus	Gentoo Local Security Checks	12/8/2016	1/11/2021	high
95637	GLSA-201612-21：SQLite：複数の脆弱性	Nessus	Gentoo Local Security Checks	12/8/2016	1/11/2021	high
84488	Mac OS X 10.10.x < 10.10.4 多個弱點 (GHOST) (Logjam)	Nessus	MacOS X Local Security Checks	7/1/2015	5/28/2024	critical
84488	Mac OS X 10.10.x < 10.10.4 多种漏洞 (GHOST) (Logjam)	Nessus	MacOS X Local Security Checks	7/1/2015	5/28/2024	critical
84488	Mac OS X 10.10.x < 10.10.4 複数の脆弱性（GHOST）（Logjam）	Nessus	MacOS X Local Security Checks	7/1/2015	5/28/2024	critical

Detections

Analytics

Plugins Search

critical

high

critical

high

high

high

critical

critical

critical