{"schemaVersion":3,"id":"USN-7679-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"sqlite3 vulnerabilities\n\nIt was discovered that SQLite incorrectly handled aggregate terms. An\nattacker could use this issue to cause SQLite to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. (CVE-2025-6965)\n\nIt was discovered that SQLite incorrectly handled certain argument values\nto sqlite3_db_config(). An attacker could use this issue to cause SQLite to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This update fixes the issue in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and\nUbuntu 18.04 LTS. This issue was previously fixed in Ubuntu 20.04 LTS via\nUSN-7528-1. (CVE-2025-29088)","dates":{"published":"2025-07-29T15:36:45.000Z","modified":"2026-09-11T15:00:18.302Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"sqlite3","name":"sqlite3","label":"sqlite3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/sqlite3","purlType":"deb","versions":[{"text":"< 3.8.2-1ubuntu2.2+esm5","noFixRecorded":false,"fixedIn":null},{"text":"< 3.11.0-1ubuntu1.5+esm3","noFixRecorded":false,"fixedIn":null},{"text":"< 3.22.0-1ubuntu0.7+esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 3.31.1-4ubuntu0.7+esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.8.2-1ubuntu2.2+esm5 | < 3.11.0-1ubuntu1.5+esm3 | < 3.22.0-1ubuntu0.7+esm2 | < 3.31.1-4ubuntu0.7+esm1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-7679-1","label":"ubuntu.com/security/notices/USN-7679-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-6965","label":"ubuntu.com/security/CVE-2025-6965","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2025-29088","label":"ubuntu.com/security/CVE-2025-29088","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2025-29088","CVE-2025-6965"],"downstream":[],"duplicates":[],"related":["CVE-2025-29088","CVE-2025-52099","CVE-2025-6965"]},"timeline":[{"kind":"published","date":"2025-07-29T15:36:45.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-11T15:00:18.302Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T12:08:31.354Z","stale":false,"partial":false}}