UnratedFix available
sqlite3 vulnerabilities
Type: advisorySources: OSV
It was discovered that SQLite incorrectly handled aggregate terms. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-6965) It was discovered that SQLite incorrectly handled certain argument values to sqlite3_db_config(). An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This update fixes the issue in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. This issue was previously fixed in Ubuntu 20.04 LTS via USN-7528-1. (CVE-2025-29088)
- Products
- sqlite3
- Affected versions
- 3.10.0-1, 3.10.1-1, 3.10.2-1, 3.11.0-1ubuntu1, 3.11.0-1ubuntu1.1, 3.11.0-1ubuntu1.2, 3.11.0-1ubuntu1.3, 3.11.0-1ubuntu1.4, 3.11.0-1ubuntu1.5, 3.11.0-1ubuntu1.5+esm1, 3.11.0-1ubuntu1.5+esm2, 3.19.3-3, 3.20.1-2, 3.21.0-1, 3.22.0-1, 3.22.0-1ubuntu0.1, 3.22.0-1ubuntu0.2, 3.22.0-1ubuntu0.3, 3.22.0-1ubuntu0.4, 3.22.0-1ubuntu0.5, 3.22.0-1ubuntu0.6, 3.22.0-1ubuntu0.7, 3.22.0-1ubuntu0.7+esm1, 3.29.0-2, 3.30.1-1, 3.30.1-1ubuntu1, 3.31.1-1ubuntu1, 3.31.1-3, 3.31.1-4, 3.31.1-4ubuntu0.1, 3.31.1-4ubuntu0.2, 3.31.1-4ubuntu0.3, 3.31.1-4ubuntu0.4, 3.31.1-4ubuntu0.5, 3.31.1-4ubuntu0.6, 3.31.1-4ubuntu0.7, 3.7.17-1ubuntu1, 3.8.0.2-1ubuntu1, 3.8.1-1ubuntu1, 3.8.1-1ubuntu3, 3.8.11.1-1, 3.8.2-1ubuntu1, 3.8.2-1ubuntu2, 3.8.2-1ubuntu2.1, 3.8.2-1ubuntu2.2, 3.8.2-1ubuntu2.2+esm1, 3.8.2-1ubuntu2.2+esm2, 3.8.2-1ubuntu2.2+esm3, 3.8.2-1ubuntu2.2+esm4, 3.9.1-2, 3.9.2-1
- Fixed versions
- 3.11.0-1ubuntu1.5+esm3, 3.22.0-1ubuntu0.7+esm2, 3.31.1-4ubuntu0.7+esm1, 3.8.2-1ubuntu2.2+esm5
- CVEs
- CVE-2025-29088, CVE-2025-6965
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 17:15 UTC · Revision 1
Source evidence
It was discovered that SQLite incorrectly handled aggregate terms. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-6965) It was discovered that SQLite incorrectly handled certain argument values to sqlite3_db_config(). An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This update fixes the issue in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. This issue was previously fixed in Ubuntu 20.04 LTS via USN-7528-1. (CVE-2025-29088)
osv:USN-7679-1
sqlite3
Fixed versions: 3.8.2-1ubuntu2.2+esm5
sqlite3
Fixed versions: 3.11.0-1ubuntu1.5+esm3
sqlite3
Fixed versions: 3.22.0-1ubuntu0.7+esm2
sqlite3
Fixed versions: 3.31.1-4ubuntu0.7+esm1
Complete source record
{
"id": "4bc5446ed437dd57c1aafecc81d0e8b967638769d00feef46789311a6fb3d8b8",
"url": "https://osv.dev/vulnerability/USN-7679-1",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "sqlite3 vulnerabilities",
"summary": "It was discovered that SQLite incorrectly handled aggregate terms. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-6965) It was discovered that SQLite incorrectly handled certain argument values to sqlite3_db_config(). An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. This update fixes the issue in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. This issue was previously fixed in Ubuntu 20.04 LTS via USN-7528-1. (CVE-2025-29088)",
"evidence": "osv:USN-7679-1",
"products": [
{
"name": {
"value": "sqlite3",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.8.2-1ubuntu2.2+esm5",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "3.7.17-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.0.2-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.1-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.1-1ubuntu3",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.2-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.2-1ubuntu2",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.2-1ubuntu2.1",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.2-1ubuntu2.2",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.2-1ubuntu2.2+esm1",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.2-1ubuntu2.2+esm2",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.2-1ubuntu2.2+esm3",
"evidence": "/affected/0/versions"
},
{
"value": "3.8.2-1ubuntu2.2+esm4",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "sqlite3",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.11.0-1ubuntu1.5+esm3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "3.8.11.1-1",
"evidence": "/affected/1/versions"
},
{
"value": "3.9.1-2",
"evidence": "/affected/1/versions"
},
{
"value": "3.9.2-1",
"evidence": "/affected/1/versions"
},
{
"value": "3.10.0-1",
"evidence": "/affected/1/versions"
},
{
"value": "3.10.1-1",
"evidence": "/affected/1/versions"
},
{
"value": "3.10.2-1",
"evidence": "/affected/1/versions"
},
{
"value": "3.11.0-1ubuntu1",
"evidence": "/affected/1/versions"
},
{
"value": "3.11.0-1ubuntu1.1",
"evidence": "/affected/1/versions"
},
{
"value": "3.11.0-1ubuntu1.2",
"evidence": "/affected/1/versions"
},
{
"value": "3.11.0-1ubuntu1.3",
"evidence": "/affected/1/versions"
},
{
"value": "3.11.0-1ubuntu1.4",
"evidence": "/affected/1/versions"
},
{
"value": "3.11.0-1ubuntu1.5",
"evidence": "/affected/1/versions"
},
{
"value": "3.11.0-1ubuntu1.5+esm1",
"evidence": "/affected/1/versions"
},
{
"value": "3.11.0-1ubuntu1.5+esm2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "sqlite3",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.22.0-1ubuntu0.7+esm2",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": [
{
"value": "3.19.3-3",
"evidence": "/affected/2/versions"
},
{
"value": "3.20.1-2",
"evidence": "/affected/2/versions"
},
{
"value": "3.21.0-1",
"evidence": "/affected/2/versions"
},
{
"value": "3.22.0-1",
"evidence": "/affected/2/versions"
},
{
"value": "3.22.0-1ubuntu0.1",
"evidence": "/affected/2/versions"
},
{
"value": "3.22.0-1ubuntu0.2",
"evidence": "/affected/2/versions"
},
{
"value": "3.22.0-1ubuntu0.3",
"evidence": "/affected/2/versions"
},
{
"value": "3.22.0-1ubuntu0.4",
"evidence": "/affected/2/versions"
},
{
"value": "3.22.0-1ubuntu0.5",
"evidence": "/affected/2/versions"
},
{
"value": "3.22.0-1ubuntu0.6",
"evidence": "/affected/2/versions"
},
{
"value": "3.22.0-1ubuntu0.7",
"evidence": "/affected/2/versions"
},
{
"value": "3.22.0-1ubuntu0.7+esm1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "sqlite3",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.31.1-4ubuntu0.7+esm1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": [
{
"value": "3.29.0-2",
"evidence": "/affected/3/versions"
},
{
"value": "3.30.1-1",
"evidence": "/affected/3/versions"
},
{
"value": "3.30.1-1ubuntu1",
"evidence": "/affected/3/versions"
},
{
"value": "3.31.1-1ubuntu1",
"evidence": "/affected/3/versions"
},
{
"value": "3.31.1-3",
"evidence": "/affected/3/versions"
},
{
"value": "3.31.1-4",
"evidence": "/affected/3/versions"
},
{
"value": "3.31.1-4ubuntu0.1",
"evidence": "/affected/3/versions"
},
{
"value": "3.31.1-4ubuntu0.2",
"evidence": "/affected/3/versions"
},
{
"value": "3.31.1-4ubuntu0.3",
"evidence": "/affected/3/versions"
},
{
"value": "3.31.1-4ubuntu0.4",
"evidence": "/affected/3/versions"
},
{
"value": "3.31.1-4ubuntu0.5",
"evidence": "/affected/3/versions"
},
{
"value": "3.31.1-4ubuntu0.6",
"evidence": "/affected/3/versions"
},
{
"value": "3.31.1-4ubuntu0.7",
"evidence": "/affected/3/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "USN-7679-1",
"aliases": [
"USN-7679-1"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.8.2-1ubuntu2.2+esm5"
}
]
}
],
"package": {
"name": "sqlite3",
"purl": "pkg:deb/ubuntu/sqlite3?arch=source&distro=esm-infra-legacy%2Ftrusty",
"ecosystem": "Ubuntu:Pro:14.04:LTS"
},
"versions": [
"3.7.17-1ubuntu1",
"3.8.0.2-1ubuntu1",
"3.8.1-1ubuntu1",
"3.8.1-1ubuntu3",
"3.8.2-1ubuntu1",
"3.8.2-1ubuntu2",
"3.8.2-1ubuntu2.1",
"3.8.2-1ubuntu2.2",
"3.8.2-1ubuntu2.2+esm1",
"3.8.2-1ubuntu2.2+esm2",
"3.8.2-1ubuntu2.2+esm3",
"3.8.2-1ubuntu2.2+esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7679-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2025-6965",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-29088",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:14.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "lemon",
"binary_version": "3.8.2-1ubuntu2.2+esm5"
},
{
"binary_name": "libsqlite3-0",
"binary_version": "3.8.2-1ubuntu2.2+esm5"
},
{
"binary_name": "libsqlite3-tcl",
"binary_version": "3.8.2-1ubuntu2.2+esm5"
},
{
"binary_name": "sqlite3",
"binary_version": "3.8.2-1ubuntu2.2+esm5"
}
],
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.11.0-1ubuntu1.5+esm3"
}
]
}
],
"package": {
"name": "sqlite3",
"purl": "pkg:deb/ubuntu/sqlite3?arch=source&distro=esm-infra%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"3.8.11.1-1",
"3.9.1-2",
"3.9.2-1",
"3.10.0-1",
"3.10.1-1",
"3.10.2-1",
"3.11.0-1ubuntu1",
"3.11.0-1ubuntu1.1",
"3.11.0-1ubuntu1.2",
"3.11.0-1ubuntu1.3",
"3.11.0-1ubuntu1.4",
"3.11.0-1ubuntu1.5",
"3.11.0-1ubuntu1.5+esm1",
"3.11.0-1ubuntu1.5+esm2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7679-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2025-6965",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-29088",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "lemon",
"binary_version": "3.11.0-1ubuntu1.5+esm3"
},
{
"binary_name": "libsqlite3-0",
"binary_version": "3.11.0-1ubuntu1.5+esm3"
},
{
"binary_name": "libsqlite3-tcl",
"binary_version": "3.11.0-1ubuntu1.5+esm3"
},
{
"binary_name": "sqlite3",
"binary_version": "3.11.0-1ubuntu1.5+esm3"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.22.0-1ubuntu0.7+esm2"
}
]
}
],
"package": {
"name": "sqlite3",
"purl": "pkg:deb/ubuntu/sqlite3?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"3.19.3-3",
"3.20.1-2",
"3.21.0-1",
"3.22.0-1",
"3.22.0-1ubuntu0.1",
"3.22.0-1ubuntu0.2",
"3.22.0-1ubuntu0.3",
"3.22.0-1ubuntu0.4",
"3.22.0-1ubuntu0.5",
"3.22.0-1ubuntu0.6",
"3.22.0-1ubuntu0.7",
"3.22.0-1ubuntu0.7+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7679-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2025-6965",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-29088",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:18.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "lemon",
"binary_version": "3.22.0-1ubuntu0.7+esm2"
},
{
"binary_name": "libsqlite3-0",
"binary_version": "3.22.0-1ubuntu0.7+esm2"
},
{
"binary_name": "libsqlite3-tcl",
"binary_version": "3.22.0-1ubuntu0.7+esm2"
},
{
"binary_name": "sqlite3",
"binary_version": "3.22.0-1ubuntu0.7+esm2"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.31.1-4ubuntu0.7+esm1"
}
]
}
],
"package": {
"name": "sqlite3",
"purl": "pkg:deb/ubuntu/sqlite3?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"3.29.0-2",
"3.30.1-1",
"3.30.1-1ubuntu1",
"3.31.1-1ubuntu1",
"3.31.1-3",
"3.31.1-4",
"3.31.1-4ubuntu0.1",
"3.31.1-4ubuntu0.2",
"3.31.1-4ubuntu0.3",
"3.31.1-4ubuntu0.4",
"3.31.1-4ubuntu0.5",
"3.31.1-4ubuntu0.6",
"3.31.1-4ubuntu0.7"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7679-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2025-6965",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/S:N/AU:N/R:U/V:D/RE:L/U:Green"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
}
],
"ecosystem": "Ubuntu:Pro:20.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "lemon",
"binary_version": "3.31.1-4ubuntu0.7+esm1"
},
{
"binary_name": "libsqlite3-0",
"binary_version": "3.31.1-4ubuntu0.7+esm1"
},
{
"binary_name": "libsqlite3-tcl",
"binary_version": "3.31.1-4ubuntu0.7+esm1"
},
{
"binary_name": "sqlite3",
"binary_version": "3.31.1-4ubuntu0.7+esm1"
}
],
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}
}
],
"modified": "2026-10-27T04:16:30.257537160Z",
"provider": "osv",
"upstream": [
"CVE-2025-29088",
"CVE-2025-6965",
"UBUNTU-CVE-2025-29088",
"UBUNTU-CVE-2025-6965"
],
"references": [
"https://ubuntu.com/security/notices/USN-7679-1",
"https://ubuntu.com/security/CVE-2025-6965",
"https://ubuntu.com/security/CVE-2025-29088"
]
},
"related_cves": [
{
"value": "CVE-2025-29088",
"evidence": "/upstream"
},
{
"value": "CVE-2025-6965",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 460188,
"published_at": "2025-07-29T15:36:45+00:00"
}