CVE-2023-31617

CVE-2023-31617 affects Virtuoso Open-Source Edition (virtuoso-opensource) 7.2.9, specifically the dk_set_delete component, enabling Denial of Service via crafted SQL statements. Multiple connected sources (OSV, OSV Debian, Nessus/ALAS/NASL entries) confirm the DoS impact and reiterate affected co...

CVE-2023-31623

CVE-2023-31623 affects Virtuoso Open-Source Edition v7.2.9, with the issue in the mp_box_copy component allowing Denial of Service via crafted SQL statements. Connected sources confirm remediation guidance and a patch to 7.2.11 (e.g., ALAS-2023-2360) is available, reducing exposure. If upgrading,...

CVE-2023-31623

An issue in the mpboxcopy component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2023-31629

An issue in the sqlounionscope component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2023-31625

An issue in the psiginfo component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2023-31627

An issue in the strhash component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2023-31627

The CVE-2023-31627 issue is in the strhash component of Virtuoso Open-Source Edition (openlink virtuoso-opensource) v7.2.9, allowing a Denial of Service via crafted SQL statements. Public records confirm this vulnerability and list it among multiple issues in Virtuoso 7.2.x and note remediation t...

CVE-2023-31609

An issue in the dfeunitcolloci component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2023-31629

CVE-2023-31629 affects Virtuoso Open-Source Edition (openlink virtuoso-opensource) v7.2.9, specifically the sqlo_union_scope component. The vulnerability enables a Denial of Service (DoS) when processing crafted SQL statements, as described in the source CVE entry and corroborated by OSV referenc...

CVE-2023-31617

An issue in the dksetdelete component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2023-31610

CVE-2023-31610 affects Virtuoso Open-Source (virtuoso-opensource) 7.2.9, impacting the _IO_default_xsputn component and allowing DoS via crafted SQL statements. Public sources (OSV, Debian, ENISA EUVD) corroborate the issue. Remediation in practice: upgrade to Virtuoso Open-Source 7.2.11 or newer...

CVE-2023-31609

An issue in the dfeunitcolloci component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2023-31621

CVE-2023-31621 affects virtuoso-opensource for openlink, specifically kc_var_col in version 7.2.9, enabling a Denial of Service via crafted SQL statements. Public sources in the provided set (NVDOSV/Nessus/ALAS advisories) corroborate the DoS impact and list 7.2.9 as affected with fixed releases ...

CVE-2023-31611

CVE-2023-31611 affects virtuoso-opensource (openlink) with vulnerable component __libc_longjmp in version 7.2.9, allowing DoS through crafted SQL statements. Public advisories (Amazon Linux 2 ALAS-2023-2360, USN-6832-1, OSV entries, Debian OSV, etc.) confirm multiple vendors have updated to 7.2.1...

Virtuoso Open-Source Edition SQL注入漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform from OpenLink Software open source. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.9, which...

CVE-2023-31608

CVE-2023-31608 affects openlink virtuoso-opensource v7.2.9, specifically the artm_div_int component. The issue enables Denial of Service (DoS) through crafted SQL statements, as described in multiple sources. The available documents identify the vulnerable component and the DoS impact but do not ...

CVE-2023-31614

An issue in the mpboxdeserializestring function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

CVE-2023-31616

An issue in the bifmod component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2023-31607

CVE-2023-31607 affects Virtuoso Open-Source Edition (virtuoso-opensource) v7.2.9, with the issue in the __libc_malloc component allowing Denial of Service via crafted SQL statements. The OSV/Nessus/Red Hat/Amazon Linux advisories confirm this vulnerability and list affected packages; some documen...

CVE-2023-31626

CVE-2023-31626 concerns the Virtuoso Open-Source Edition, specifically the gpf_notice component in affected releases (notably Virtuoso Open-Source 7.2.9). Technical details in connected sources describe a Denial of Service (DoS) potential triggered by crafted SQL statements. Additional related en...