CVE-2025-29088
Fixed in a distro release EPSS <1%CVSS 5.6
In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An sz*nBig multiplication is not cast to a 64-bit integer, and consequently some memory allocations may be incorrect.
Products: SQLite, Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC), Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.21 | sqlite | 3.48.0-r4 |
| Debian 12 | sqlite3 | no fix |
| Debian 13 | sqlite3 | 3.46.1-4 |
| Debian 14 | sqlite3 | 3.46.1-4 |
| SUSE Enterprise Storage 7.1 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Micro 5.1 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Micro 5.2 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Micro 5.3 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Micro 5.4 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Micro 5.5 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | sqlite3 | 3.49.1-9.33.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | sqlite3 | 3.49.1-9.33.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Linux Micro 6.0 | sqlite3 | 3.49.1-1.1 |
| SUSE Linux Micro 6.1 | sqlite3 | 3.49.1-slfo.1.1_1.1 |
| SUSE Manager Proxy 4.3 | sqlite3 | 3.49.1-150000.3.27.1 |
| SUSE Manager Server 4.3 | sqlite3 | 3.49.1-150000.3.27.1 |
| Ubuntu 20.04 LTS | sqlite3 | 3.31.1-4ubuntu0.7 |
| Ubuntu 22.04 LTS | sqlite3 | 3.37.2-2ubuntu0.4 |
| Ubuntu 24.04 LTS | sqlite3 | 3.45.1-1ubuntu2.3 |
| Ubuntu Pro 14.04 LTS | sqlite3 | 3.8.2-1ubuntu2.2+esm5 |
| Ubuntu Pro 16.04 LTS | sqlite3 | 3.11.0-1ubuntu1.5+esm3 |
| Ubuntu Pro 18.04 LTS | sqlite3 | 3.22.0-1ubuntu0.7+esm2 |
| Ubuntu Pro 20.04 LTS | sqlite3 | 3.31.1-4ubuntu0.7+esm1 |
| openSUSE Leap 15.6 | sqlite3 | 3.49.1-150000.3.27.1 |
| openSUSE Tumbleweed | sqlite3 | 3.49.1-3.1 |