USN-8480-1: sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled certain memory operations in the FTS5 full-text search extension. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/sqlite3to a version that resolves this vulnerability.Fixed in 3.37.2-2ubuntu0.6 - Upgrade
Upgrade
ubuntu/sqlite3to a version that resolves this vulnerability.Fixed in 3.45.1-1ubuntu2.6 - Upgrade
Upgrade
ubuntu/sqlite3to a version that resolves this vulnerability.Fixed in 3.46.1-8ubuntu0.1 - Upgrade
Upgrade
ubuntu/sqlite3to a version that resolves this vulnerability.Fixed in 3.46.1-9ubuntu0.1 - Upgrade
Upgrade
ubuntu/libsqlite3-0to a version that resolves this vulnerability.Fixed in 3.46.1-9ubuntu0.1 - Upgrade
Upgrade
ubuntu/libsqlite3-0to a version that resolves this vulnerability.Fixed in 3.46.1-8ubuntu0.1 - Upgrade
Upgrade
ubuntu/libsqlite3-0to a version that resolves this vulnerability.Fixed in 3.45.1-1ubuntu2.6 - Upgrade
Upgrade
ubuntu/libsqlite3-0to a version that resolves this vulnerability.Fixed in 3.37.2-2ubuntu0.6
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
Which Ubuntu packages should be assessed for this issue?
Assess ubuntu/sqlite3 and ubuntu/libsqlite3-0 installations on Ubuntu.
Which CVE identifiers are associated with this advisory?
The advisory references CVE-2026-11822 and CVE-2026-11824.