CVE-2025-52099

CVE-2025-52099 SQLite 3.50.0 における整数オーバーフロー SQLite 3.50.0 の setupLookaside 関数で整数オーバーフローを引き起こす概念実証（PoC）を以下に示します。このオーバーフローは、sz nBig の乗算がチェックされずに発生し、負の値にラップして不正なメモリ書き込みを引き起こす可能性があります。 テスト環境: Ubuntu 22.04 x8664 + SQLite 3.50.0（カスタムビルド） PoC コード（C）: include include int main sqlite3 db; root@kitploit: //...

ROS-20251203-20

A vulnerability in the setupLookaside function of the SQLite database management system is related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service...

SQLite <= 3.50 DoS Vulnerability

SQLite is prone to a denial of service DoS vulnerability. Note: This VT has been deprecated as the attached CVE has been rejected as a duplicate of CVE-2025-29088. This older CVE is already covered in the VT SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from ...

FreeBSD : SQLite -- Integer Overflow vulnerability (2cd61f76-b41b-11f0-bf21-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2cd61f76-b41b-11f0-bf21-b42e991fc52e advisory. http://sqlite3.com reports: Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote...

Linux Distros Unpatched Vulnerability : CVE-2025-52099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote attacker to cause a denial of service via the setupLookaside function CVE-2025-52099...

DEBIAN-CVE-2025-52099

Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote attacker to cause a denial of service via the setupLookaside function...

CVE-2025-52099

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-29088. Reason: This record is a duplicate of CVE-2025-29088. Notes: All CVE users should reference CVE-2025-29088 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the setupLookaside function in the main.c file. An attacker can cause the application to crash or become unresponsive by sending specially crafted input that triggers an integer overflow. Remediation...

编号撤回

SQLite3 is a database system in the SQLite open source. A security vulnerability exists in SQLite3 version 3.50.0, which stems from an integer overflow in the setupLookaside function that could lead to a denial of service attack...

PT-2025-43669

Name of the Vulnerable Software and Affected Versions SQLite version 3.50.0 Description An integer overflow exists in the setupLookaside function of SQLite version 3.50.0. This issue could allow a remote attacker to cause a denial of service or potentially achieve remote code execution...

CVE-2025-52099

...

CVE-2025-52099

Removed by vendor...

SQLite -- Integer Overflow vulnerability

http://sqlite3.com reports: Integer Overflow vulnerability in SQLite SQLite3 v.3.50.0 allows a remote attacker to cause a denial of service via the setupLookaside function...