CVE-2025-6965 @ mufasa
Status
new
Priority
7.7
Match score
4.0
Risk
MemCorrupt
Remote
priv:user
CVSS
7.7 HIGH
Reason
cpe: sqlite; pkgs: sqlite; version: in-range: sqlite-3.7.17-8.0.1.el7_7.1.tuxcare.els1; risk:memory_corruption
Created
2026-10-15T10:19:51Z
Updated
2026-10-20T10:18:13Z
Package interrogation (copy)
Run on the host — click to copy a command. RPM
| Package | Commands |
|---|---|
| sqlite-3.7.17-8.0.1.el7_7.1.tuxcare.els1 | |
| alt-sqlite-3.53.4-1.el7 | |
| cpanel-sqlite-3.50.3-1.cp108~el7 |
Inventory lookup
Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.
Suggestions: sqlite
Same product CVEs in your queue
Other open tickets that look like the same product. Closed tickets are omitted unless they are already pegged to this CVE.
| CVE | CVSS | KEV | Systems | Status | Matched | Already related | |
|---|---|---|---|---|---|---|---|
| CVE-2020-11656 | 9.8 | morris, mufasa | new | sqlite | — | ||
| CVE-2025-70873 | 7.5 | morris, mufasa | new | sqlite | — | ||
| CVE-2022-35737 | 7.5 | morris, mufasa | new | sqlite | — |
Related CVE (same fix)
Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.
Host OS / kernel
OS
CloudLinux release 7.9 (Boris Yegorov)
(7.9)
· cloudlinux
Arch
x86_64
kernel_release
uname -r → 3.10.0-962.3.2.lve1.5.89.el7.x86_64kernel_version
uname -v → #1 SMP Thu Jul 9 15:55:31 UTC 2026For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.
Same CVE on other hosts
Open the ticket for this CVE on another system.
| System | Status | Priority | Updated | |
|---|---|---|---|---|
| morris | new | 7.7 | 2026-10-20T10:18:13Z | Open |
Description
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.
Update status
Add note only
References
- https://www.sqlite.org/src/info/5508b56fd24016c13981ec280ecdd833007c9d8dd595edb295b984c2b487b5c8
- http://seclists.org/fulldisclosure/2025/Sep/49
- http://seclists.org/fulldisclosure/2025/Sep/53
- http://seclists.org/fulldisclosure/2025/Sep/56
- http://seclists.org/fulldisclosure/2025/Sep/57
- http://seclists.org/fulldisclosure/2025/Sep/58
- http://www.openwall.com/lists/oss-security/2025/09/06/1
- https://cert-portal.siemens.com/productcert/html/ssa-225816.html
- https://cert-portal.siemens.com/productcert/html/ssa-485750.html
- https://cert-portal.siemens.com/productcert/html/ssa-765416.html
NVD: CVE-2025-6965