CVE-2024-57628

CVE-2024-57628 is a vulnerability in the exp_values_set_supertype component of MonetDB Server version 11.49.1. The issue enables attackers to trigger a Denial of Service (DoS) condition by sending crafted SQL statements. It carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity primarily due to its impact on availability, and is associated with CWE-89 (Improper Neutralization of Special Elements used in an SQL Command).

Remote attackers can exploit this vulnerability over the network with low complexity and no authentication or user interaction required. Successful exploitation results in a DoS, disrupting the availability of the affected MonetDB Server instance while having no impact on confidentiality or integrity.

Mitigation details and further information are available in the referenced GitHub issue at https://github.com/MonetDB/MonetDB/issues/7437, published on 2025-01-14.