CVE-2025-70873

highpriority · track · 0EPSS 0.003 · 25 %ileDEEUNLRUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.33% (25th) EPSS

CVSS 7.5 · high

Is it mine?

280 products

Check your exposure

Who says so?

9 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-22

An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)siemens_psirt
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/
Fixedlibsqlite3-0-0:3.51.3-9.47.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-32bit-0:3.51.3-9.47.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-9.47.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-9.47.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-9.47.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.ppc64le as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-150000.3.39.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-32bit-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-32bit-0:3.51.3-150000.3.39.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-150000.3.39.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-150000.3.39.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-150000.3.39.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-150000.3.39.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-150000.3.39.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-150000.3.39.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-150000.3.39.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-150000.3.39.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-150000.3.39.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-150000.3.39.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-doc-0:3.51.3-150000.3.39.1.noarch as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.ppc64le as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-150000.3.39.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-slfo.1.1_1.1.aarch64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-slfo.1.1_1.1.ppc64le as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-slfo.1.1_1.1.s390x as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-slfo.1.1_1.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-1.1.aarch64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-1.1.s390x as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-1.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlemon-0:3.51.3-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlemon-0:3.51.3-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlemon-0:3.51.3-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlemon-0:3.51.3-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-0:3.51.3-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-32bit-0:3.51.3-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-32bit-0:3.51.3-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-32bit-0:3.51.3-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-32bit-0:3.51.3-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-x86-64-v3-0:3.51.3-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-x86-64-v3-0:3.51.3-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-x86-64-v3-0:3.51.3-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedlibsqlite3-0-x86-64-v3-0:3.51.3-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-0:3.51.3-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-devel-0:3.51.3-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-doc-0:3.51.3-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-doc-0:3.51.3-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-doc-0:3.51.3-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-doc-0:3.51.3-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsqlite3-tcl-0:3.51.3-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
FixedRUGGEDCOM CROSSBOW Station Access Controller (SAC)cisa_csaf_ot
Update to V6.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/110006651/

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.3–7.5

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · CISA US

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondaryexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · Siemens ProductCERT DE

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:Nsecondary · SUSE Product Security

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-244USCWE-244USCWE-244USCWE-244USCWE-908US

affected products (280)

Products and version ranges known to be affected.

Oracle Communicationsall versionscert_bundDEcpe:/a:oracle:communications:-
Oracle Communications 15.0.0.0.0all versionscert_bundDEcpe:/a:oracle:communications:15.0.0.0.0
Oracle Communications 15.0.1.0.0all versionscert_bundDEcpe:/a:oracle:communications:15.0.1.0.0
Oracle Communications 15.1.0.0.0all versionscert_bundDEcpe:/a:oracle:communications:15.1.0.0.0
Oracle Communications 15.2.0.0.0all versionscert_bundDEcpe:/a:oracle:communications:15.2.0.0.0
Oracle Communications 7.3.6all versionscert_bundDEcpe:/a:oracle:communications:7.3.6
Oracle Communications 7.4.0all versionscert_bundDEcpe:/a:oracle:communications:7.4.0
Oracle Communications 7.5.0all versionscert_bundDEcpe:/a:oracle:communications:7.5.0
Oracle Communications 8.0.0all versionscert_bundDEcpe:/a:oracle:communications:8.0.0
Oracle Financial Services Applications 14.5.0-14.8.0all versionscert_bundDEcpe:/a:oracle:financial_services_applications:14.5.0-14.8.0
Oracle Financial Services Applications 8.0.7.9.0all versionscert_bundDEcpe:/a:oracle:financial_services_applications:8.0.7.9.0
Oracle Financial Services Applications 8.0.8.7.0all versionscert_bundDEcpe:/a:oracle:financial_services_applications:8.0.8.7.0
Oracle Financial Services Applications 8.1.2.5.0all versionscert_bundDEcpe:/a:oracle:financial_services_applications:8.1.2.5.0
Oracle Financial Services Applications 8.1.2.7all versionscert_bundDEcpe:/a:oracle:financial_services_applications:8.1.2.7
Oracle Financial Services Applications 8.1.2.9all versionscert_bundDEcpe:/a:oracle:financial_services_applications:8.1.2.9
Oracle Financial Services Applications 8.1.3.0all versionscert_bundDEcpe:/a:oracle:financial_services_applications:8.1.3.0
Oracle Financial Services Applications 8.1.3.1all versionscert_bundDEcpe:/a:oracle:financial_services_applications:8.1.3.1
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC)≤ vers:intdot/<6.0cisa_csaf_otUS
n/a n/a≤ n/aenisa_euvdEU

showing 20 of 280

advisories (14)

Vendor and ecosystem advisories describing this.

NCSC-2026-0200Kwetsbaarheden verholpen in Oracle CommunicationsNL2026-06-17csaf · ncsc_nlNL
Oracle heeft kwetsbaarheden verholpen in Oracle Communications
NCSC-2026-0258Kwetsbaarheden verholpen in Oracle Financial ServicesNL2026-07-22csaf · ncsc_nlNL
Oracle heeft kwetsbaarheden verholpen in diverse Financial Services modules. Ook heeft Oracle updates voor diverse third-party-producten verwerkt.
NCSC-2026-0415Kwetsbaarheden verholpen in Siemens-productenNL2026-10-13csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten zoals Desigo, Industrial Plus, RUGGEDCOM, SIMATIC en SIPLUS.
SSA-765416SSA-765416: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller2026-10-13csaf · siemens_psirtDE
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.
SUSE-SU-2026:0955-1Security update for sqlite32026-03-23csaf · suse_csafDE
Security update for sqlite3
SUSE-SU-2026:1065-1Security update for sqlite32026-03-26csaf · suse_csafDE
Security update for sqlite3
SUSE-SU-2026:20771-1Security update for sqlite32026-03-23csaf · suse_csafDE
Security update for sqlite3
SUSE-SU-2026:20794-1Security update for sqlite32026-03-19csaf · suse_csafDE
Security update for sqlite3
WID-SEC-W-2026-1942Oracle Communications: Mehrere SchwachstellenDeutsch2026-06-16csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit und Integrität zu gefährden.
WID-SEC-W-2026-2437Oracle Communications: Mehrere SchwachstellenDeutsch2026-07-21csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
WID-SEC-W-2026-2445Oracle Financial Services Applications: Mehrere SchwachstellenDeutsch2026-07-21csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Financial Services Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
openSUSE-SU-2026:10406-1lemon-3.51.3-1.1 on GA media2026-03-22csaf · suse_csafDE
lemon-3.51.3-1.1 on GA media
ICSA-26-295-15Siemens RUGGEDCOM CROSSBOW Station Access Controller2026-10-13icsa · cisa_csaf_otUS
RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code, cause a denial of service, or obtain sensitive information. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.
BIT-sqlite-2025-708732026-04-18vendor · osvUS
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund cisa_csaf_ot ncsc_nl siemens_psirt suse_csaf osv NVD CVE.org MITRE

published 2026-03-12modified 2026-06-17

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan