CVE-2024-57653

An issue in the qstvecsetcopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57659

CVE-2024-57659 affects Virtuoso Open-Source (virtuoso-opensource) in the sqlg_parallel_ts_seq component of version 7.2.11, enabling a Denial of Service via crafted SQL statements. The connected advisories indicate affected package updates to Virtuoso Open-Source 7.2.14 (and debuginfo) for AL2, wi...

CVE-2024-57645

An issue in the qiinststatefree component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57636

An issue in the itcsamplerowcheck component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57638

An issue in the dfebodycopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57657

An issue in the sqlgvecupd component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57648

CVE-2024-57648 affects virtuoso-opensource v7.2.11 (itc_set_param_row) and allows Denial of Service via crafted SQL statements. Affected package in Amazon Linux 2 advisories, remediation is to update to virtuoso-opensource 7.2.14-2 (or newer) per ALAS/ALAS2 advisories. CVSS v3.1 base score 7.5 (H...

CVE-2024-57662

CVE-2024-57662 affects virtuoso-opensource (openlink) at version 7.2.11, with the sqlg_hash_source component vulnerable to Denial of Service (DoS) via crafted SQL statements. The CVE has a CVSS v3.1 base score of 7.5 (NETWORK, LOW complexity, NONE privileges, HIGH impact on availability). Connect...

CVE-2024-57640

The CVE-2024-57640 entry affects virtuoso-opensource v7.2.11: the dc_add_int component allows an attacker to trigger a Denial of Service via crafted SQL statements. The connected Amazon Linux 2 advisories (ALAS/ALAS2-2025-2755) list this CVE among several DoS issues and specify a patch path to Vi...

CVE-2024-57645

CVE-2024-57645 affects openlink virtuoso-opensource v7.2.11, specifically the qi_inst_state_free component, and allows a Denial of Service via crafted SQL statements. The issue is documented across multiple feeds (NVD/NIST, Red Hat/CVE, OSV, Amazon Linux advisories) with remediation guidance in t...

CVE-2024-57647

An issue in the rowinsertcast component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57646

CVE-2024-57646 affects the psiginfo component of openlink virtuoso-opensource v7.2.11, enabling a Denial of Service via crafted SQL statements. Connected advisories (ALAS-2025-2755 / ALAS2-2025-2755) document remediation by upgrading virtuoso-opensource to 7.2.14-2 (and related packages). Remedia...

CVE-2024-57635

CVE-2024-57635 affects the Virtuoso Open-Source stack in the package family virtuoso-opensource. The connected sources confirm a vulnerability in the chash_array component of openlink virtuoso-opensource v7.2.11 that allows an attacker to trigger a Denial of Service (DoS) via crafted SQL statemen...

CVE-2024-57652

An issue in the numerictodv component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57644

An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57643

An issue in the boxdeserializestring component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57641

An issue in the sqlexp component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform from OpenLink Software open source. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

OpenLink Virtuoso-opensource 安全漏洞

OpenLink Virtuoso-opensource is OpenLink Software's is a powerful multi-model database and middleware platform for a variety of application scenarios that require high-performance data processing and complex data model support. A security vulnerability exists in OpenLink Virtuoso-opensource versi...

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...