CVE-2024-0232

Fixed in a distro release EPSS <1%CVSS 4.7

A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

Published 2024-01-16 · CVE record · OSV

Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Siemens RUGGEDCOM CROSSBOW Station Access Controller (SAC), Siemens SIDIS Prime, Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

Distro releases