CVE-2024-0232
EUVD-2024-1603016.01.2024, 14:15
A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| sqlite | sqlite | 3.43.0 ≤ 𝑥 < 3.43.2 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| fedoraproject | extra_packages_for_enterprise_linux | 8.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Siemens | RUGGEDCOM CROSSBOW Station Access Controller \(SAC\) | 𝑥 < V5.6 | ADP |
| Siemens | SIDIS Prime | 𝑥 < V4.0.700 | ADP |
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | 𝑥 < V1.1 | ADP |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| sqlite |
| ||||||||||||||||||||||
| sqlite3 |
|
Common Weakness Enumeration
References