¡¾Îó²îͨ¸æ¡¿SQLite FTS5 ÕûÊýÒç³öÎó²î (CVE-2025-7709)

Ðû²¼Ê±¼ä 2025-09-09

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

SQLite FTS5 ÕûÊýÒç³öÎó²î

CVE   ID

CVE-2025-7709

Îó²îÀàÐÍ

»º³åÇøÒç³ö

·¢Ã÷ʱ¼ä

2025-09-09

Îó²îÆÀ·Ö

6.9

Îó²îÆ·¼¶

ÖÐΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

µÍ

ʹÓÃÄѶÈ

¸ß

Óû§½»»¥

ÐèÒª

PoC/EXP

ÒѹûÕæ

ÔÚҰʹÓÃ

δ·¢Ã÷


SQLite FTS5£¨È«Îı¾ËÑË÷5£©ÊÇSQLiteÊý¾Ý¿âµÄÀ©Õ¹Ä£¿é£¬ÓÃÓÚʵÏÖ¸ßЧµÄÈ«ÎÄËÑË÷¹¦Ð§¡£FTS5ÌṩÁ˶ÔÎı¾Êý¾ÝµÄË÷ÒýÖ§³Ö£¬ÔÊÐíÓû§Ö´ÐÐÖØ´óµÄÎı¾ÅÌÎÊ£¬ÈçÄ£ºýÆ¥Åä¡¢¶ÌÓïËÑË÷ºÍȨÖØÅÅÐò¡£ËüʹÓõ¹ÅÅË÷ÒýÀ´´æ´¢´ÊÌõ¼°Æä·ºÆðλÖ㬴Ӷø¼ÓËÙÅÌÎÊÀú³Ì¡£FTS5Ö§³Ö¶àÖÖÓïÑԵķִʺÍËÑË÷ÉèÖã¬ÊÊÓÃÓÚÐèÒª¶Ô´ó×ÚÎı¾Êý¾Ý¾ÙÐпìËÙ¼ìË÷µÄÓ¦Óá£ÓëSQLiteµÄÆäËû¹¦Ð§¼æÈÝ£¬FTS5±»ÆÕ±éÓ¦ÓÃÓÚǶÈëʽÊý¾Ý¿âϵͳÖС£


2025Äê9ÔÂ9ÈÕ£¬×ðÁú¿­Ê±¼¯ÍÅVSRC¼à²âµ½Ò»¸ö±£´æÓÚSQLite FTS5À©Õ¹ÖеÄÕûÊýÒç³öÎó²î¡£µ±ÅÌËãÂß¼­É¾³ýÖ¸ÕëÊý×éµÄ¾Þϸ²¢½«Æä½Ø¶ÏΪ32λÕûÊýʱ£¬¾Í»á±¬·¢´ËÎó²î¡£¹¥»÷Õß¿ÉÒÔͨ¹ý²Ù¿ØÊý¾Ý£¬Ê¹ÓôËÎó²îµ¼ÖÂÖ¸Ïò²¿·ÖÊÜ¿ØÊý¾ÝµÄÖ¸ÕëÔ½½çдÈ룬´Ó¶ø¿ÉÄܵ¼ÖÂÄÚ´æË𻵻òí§Òâ´úÂëÖ´ÐС£Îó²îÆÀ·Ö6.9·Ö£¬Îó²î¼¶±ðÖÐΣ¡£


¶þ¡¢Ó°Ïì¹æÄ£


SQLite <= 3.49.1


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


ÒÑÐû²¼ÐÞ¸´°æ±¾£¬Ç뽫SQLiteÉý¼¶µ½ÈçÏ°汾¡£
SQLite >= 3.50


ÏÂÔØÁ´½Ó£ºhttps://www.sqlite.org/download.html/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬ïÔ̭ϵͳÎó²î£¬ÌáÉý·þÎñÆ÷µÄÇå¾²ÐÔ¡£
? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬Ð޸ķÀ»ðǽսÂÔ£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻò·þÎñ£¬ïÔÌ­½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬ïÔÌ­¹¥»÷Ãæ¡£
? Ê¹ÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£
? ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔ­Ôò£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£

? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£


3.4 ²Î¿¼Á´½Ó


https://github.com/google/security-research/security/advisories/GHSA-v2c8-vqqp-hv3g
https://www.openwall.com/lists/oss-security/2025/09/06/2/