CVE-2024-57656
published 2025-01-14CVE-2024-57656: An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL…
PriorityP335high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.73%
50.4th percentile
An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | virtuoso-opensource | < virtuoso-opensource 7.2.12+dfsg-0.2 (forky) | virtuoso-opensource 7.2.12+dfsg-0.2 (forky) |
| openlinksw | virtuoso | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2024-57656: An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7
osv·2025-01-14·CVSS 7.5
CVE-2024-57656 [HIGH] CVE-2024-57656: An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7
An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
GHSA
GHSA-ccv9-w5j7-qfjr: An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7
ghsa_unreviewed·2025-01-14
CVE-2024-57656 [HIGH] CWE-89 GHSA-ccv9-w5j7-qfjr: An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7
An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
Red Hat
virtuoso-opensource: DoS in sqlc_add_distinct_node
vendor_redhat·2025-01-14·CVSS 7.5
CVE-2024-57656 [HIGH] CWE-20 virtuoso-opensource: DoS in sqlc_add_distinct_node
virtuoso-opensource: DoS in sqlc_add_distinct_node
An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
A flaw was found in Virtuoso-OpenSource. This vulnerability allows attackers to cause a denial of service (DoS) via crafted SQL statements.
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Debian
CVE-2024-57656: virtuoso-opensource - An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource...
vendor_debian·2024·CVSS 7.5
CVE-2024-57656 [HIGH] CVE-2024-57656: virtuoso-opensource - An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource...
An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 7.2.12+dfsg-0.2)
sid: resolved (fixed in 7.2.12+dfsg-0.2)
trixie: resolved (fixed in 7.2.12+dfsg-0.2)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-01-14
Published