CVE-2024-0232

    Dashboard / Vulnerabilities / CVE-2024-0232

    CVE-2024-0232

    Published: 16 Jan 2024Last Modified: 12 Aug 2026

    Summary: Sqlite: use-after-free bug in jsonparseaddnodearray

    Details: A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c. This flaw allows a local attacker to leverage a victim to pass specially crafted malicious input to the application, potentially causing a crash and leading to a denial of service.

    References: https://access.redhat.com/downloads/content/package-browser/, https://lists.fedoraproject.org/archives/list/[email protected]/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/, https://www.sqlite.org/download.html, https://access.redhat.com/security/cve/CVE-2024-0232, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0232.json, https://nvd.nist.gov/vuln/detail/CVE-2024-0232, https://security.netapp.com/advisory/ntap-20240315-0007/, https://bugzilla.redhat.com/show_bug.cgi?id=2243754

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 995f96f8e11036c909b1dec14049999bc23421c6
    Fixed -43fa051ec7c5a7d89e1f5f541a5cd34d53e07422

    Affected versions

    version-3.43.1
    version-3.43.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-0232 | CVE-DB