3.2Baja
CVE-2025-29087
Descripción
In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is attacker-controlled and has a large string (e.g., 2MB or more), an integer overflow occurs in calculating the size of the result buffer, and thus malloc may not allocate enough memory.
Debilidad (CWE):
CWE-190
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Siemens | RUGGEDCOM CROSSBOW Station Access Controller (SAC) | < V5.7 | |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | V3.1.0 – < V3.1.5 | |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | V3.1.0 – < V3.1.5 | |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | V3.1.0 – < V3.1.5 | |
| SQLite | SQLite | 3.44.0 – < 3.49.1 |
Referencias y parches
- https://www.sqlite.org/cves.html Vendor Advisory
- https://gist.github.com/ylwango613/a44a29f1ef074fa783e29f04a0afd62a Third Party Advisory
- https://sqlite.org/releaselog/3_49_1.html Release Notes
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-994087.html
Coincidencias CPE (NVD) (1)
cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*≥ 3.44.0 < 3.49.1