CVE-2024-57626

CVE-2024-57626 is a vulnerability in the mat_join2 component of MonetDB Server version 11.49.1. The issue enables attackers to trigger a Denial of Service (DoS) condition by sending crafted SQL statements. It carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity due to its potential for significant availability impact, and is linked to CWE-89.

Remote unauthenticated attackers can exploit this vulnerability over the network with low attack complexity and no user interaction required. Successful exploitation disrupts service availability on affected MonetDB servers, potentially rendering the database unresponsive without impacting confidentiality or integrity.

Mitigation details are documented in the GitHub issue at https://github.com/MonetDB/MonetDB/issues/7442. Security practitioners should monitor this reference for patches or workarounds specific to MonetDB Server v11.49.1 and later versions.