CVE-2024-57644

CVE-2024-57644 is a vulnerability in the itc_hash_compare component of OpenLink Virtuoso Open Source version 7.2.11. Published on 2025-01-14, it enables attackers to cause a Denial of Service (DoS) via crafted SQL statements. The issue has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) and is linked to CWE-89 (Improper Neutralization of Special Elements used in an SQL Command, or SQL Injection).

Remote attackers require no privileges, authentication, or user interaction to exploit this vulnerability over the network with low complexity. By submitting crafted SQL statements, they can trigger the flawed itc_hash_compare function, resulting in a DoS condition as described.

Mitigation details are available in the GitHub issue tracker at https://github.com/openlink/virtuoso-opensource/issues/1193. Security practitioners should consult this reference for any patches, workarounds, or updates from the vendor.