CVE-2024-57618
Published: 14 January 2025
Description
An issue in the bind_col_exp component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
Security Summary
CVE-2024-57618 is a vulnerability in the bind_col_exp component of MonetDB Server version 11.47.11. The issue enables attackers to trigger a Denial of Service (DoS) condition by sending crafted SQL statements. It carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and is linked to CWE-404 (Improper Resource Shutdown or Release). The vulnerability was published on 2025-01-14.
Remote attackers can exploit this vulnerability without authentication privileges, user interaction, or special access requirements, as it is network-accessible with low attack complexity. Exploitation disrupts service availability with high impact, potentially crashing the MonetDB Server and making it unavailable to legitimate users, while having no effect on confidentiality or integrity.
Mitigation details are available in the referenced GitHub issue at https://github.com/MonetDB/MonetDB/issues/7418.
Details
- CWE(s)