Summary
It was discovered that SQLite incorrectly handled the concat_ws() function.
An attacker could use this issue to cause SQLite to crash, resulting in a
denial of service, or possibly execute arbitrary code. This issue only
affected Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2025-29087,
CVE-2025-3277)
It was discovered that SQLite incorrectly handled certain argument values
to sqlite3_db_config(). An attacker could use this issue to cause SQLite to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2025-29088)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | sqlite3 | 3.31.1-4ubuntu0.7 |
| Ubuntu · 22.04 LTS 22.04:LTS | sqlite3 | 3.37.2-2ubuntu0.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | sqlite3 | 3.45.1-1ubuntu2.3 |
Vulnerabilities 3
-
Medium 6.9
An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used …
-
Medium 5.6
In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial…
-
Low 3.2
In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the e…