WID-SEC-W-2025-1595

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

IBM AIX und VIOS (SQLite): Mehrere Schwachstellen

view advisory published 2025-07-17

Ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in IBM AIX und IBM VIOS ausnutzen, um einen Denial of Service Angriff durchzuführen oder um Code auszuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2025-3277UScritical9.8—
An integer overflow can be triggered in SQLite’s `concat_ws()` function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting s…
CVE-2025-29088USmedium5.5—
In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash). An sz*nBig multiplication is…
CVE-2025-29087UShigh7.5—
In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer. If the separator argument is…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan