{"schemaVersion":3,"id":"USN-7528-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"sqlite3 vulnerabilities\n\nIt was discovered that SQLite incorrectly handled the concat_ws() function.\nAn attacker could use this issue to cause SQLite to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 24.04 LTS, and Ubuntu 24.10. (CVE-2025-29087,\nCVE-2025-3277)\n\nIt was discovered that SQLite incorrectly handled certain argument values\nto sqlite3_db_config(). An attacker could use this issue to cause SQLite to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2025-29088)","dates":{"published":"2025-05-22T18:23:26.000Z","modified":"2026-04-27T18:17:08.906Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"sqlite3","name":"sqlite3","label":"sqlite3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/sqlite3","purlType":"deb","versions":[{"text":"< 3.31.1-4ubuntu0.7","noFixRecorded":false,"fixedIn":null},{"text":"< 3.37.2-2ubuntu0.4","noFixRecorded":false,"fixedIn":null},{"text":"< 3.45.1-1ubuntu2.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.31.1-4ubuntu0.7 | < 3.37.2-2ubuntu0.4 | < 3.45.1-1ubuntu2.3","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7528-1","label":"ubuntu.com/security/notices/USN-7528-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-3277","label":"ubuntu.com/security/CVE-2025-3277","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-29087","label":"ubuntu.com/security/CVE-2025-29087","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-29088","label":"ubuntu.com/security/CVE-2025-29088","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2025-29087","CVE-2025-29088","CVE-2025-3277"],"downstream":[],"duplicates":[],"related":["CVE-2025-29087","CVE-2025-29088","CVE-2025-3277","CVE-2025-52099"]},"timeline":[{"kind":"published","date":"2025-05-22T18:23:26.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-27T18:17:08.906Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T03:37:39.867Z","stale":false,"partial":false}}