CVE-2024-57656
Published: 14 January 2025
Description
An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
Security Summary
CVE-2024-57656 is a denial-of-service (DoS) vulnerability in the sqlc_add_distinct_node component of OpenLink Virtuoso Open-Source version 7.2.11. The flaw allows attackers to crash the server through crafted SQL statements and is associated with CWE-89 (SQL Injection). It has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity due to its impact on availability.
Remote attackers require no privileges or user interaction to exploit this vulnerability over the network with low complexity. Successful exploitation results in a DoS condition, disrupting service availability without affecting confidentiality or integrity.
The issue is documented in the GitHub repository for openlink/virtuoso-opensource at https://github.com/openlink/virtuoso-opensource/issues/1210. No specific patch or mitigation details are provided in the CVE record.
Details
- CWE(s)