Critical SQLite Vulnerability in Rocky Linux 10: Integer Truncation Flaw
Summary
RLSA-2025:11933: Important: sqlite security update. Affects sqlite versions < 0:3.46.1-5.el10_0. Fixed in 0:3.46.1-5.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
SQLite is a widely-used C library that implements an SQL database engine, supporting a large subset of SQL92. It allows applications to manage databases conveniently without the need for a separate database server. However, a recent vulnerability has been identified that affects the SQLite package in Rocky Linux 10, potentially exposing applications to security risks.
Vulnerability Detail
The vulnerability, identified as CVE-2025-6965, is an integer truncation issue within SQLite. This flaw can lead to unexpected behavior in applications that rely on SQLite for database management. If exploited, it may allow attackers to manipulate data or execute unauthorized commands, posing significant risks to data integrity and application security. The CVSS score for this vulnerability is 7.7, indicating a high level of severity.
How To Fix
Minimum fixed version
0:3.46.1-5.el10_0
This is the first release that contains the fix.
sudo dnf update sqliteTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The identified vulnerability in SQLite for Rocky Linux 10 poses significant security risks that need to be addressed promptly. Updating to the patched version is the most effective way to mitigate these risks and ensure the integrity of your applications.
See every vulnerability recorded for sqlite →
FAQ
CVE-2025-6965 refers to an integer truncation vulnerability found in SQLite, which can lead to potential data manipulation and security risks.
If your application uses SQLite and is running on Rocky Linux 10, it may be susceptible to this vulnerability, potentially allowing unauthorized access or data corruption.
While there are no specific workarounds, it is crucial to prioritize updating SQLite to mitigate the risk associated with this vulnerability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json. You can check your application for this vulnerability using the Vulert playground.
For more details, refer to the CVE page associated with CVE-2025-6965, which provides comprehensive information about the vulnerability and its implications.
Related vulnerabilities
Recent vulnerabilities recorded for sqlite.
