2 matches found
CLSA-2025-1755113204 Fix CVE(s): CVE-2025-29088
SECURITY UPDATE: denial of service issue due to incorrect memory allocations - debian/patches/CVE-2025-29088.patch: harden the SQLITEDBCONFIGLOOKASIDE interface against misuse, such as described in forum post 48f365daec Enhancements to the SQLITEDBCONFIGLOOKASIDE documentation - CVE-2025-29088...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the SQLITEDBCONFIGLOOKASIDE interface. An attacker can disrupt service by supplying inputs with out-of-bounds arguments to sqlite3dbconfig. Remediation Upgrade sqlite3 to version 3.49.1 or higher...