CVE-2024-57660

CVE-2024-57660 affects virtuoso-opensource v7.2.11 (sqlo_expand_jts). The vulnerability allows remote attackers to cause a Denial of Service via crafted SQL statements. Root cause is an issue in the sqlo_expand_jts component, leading to availability impact. Public advisories confirm the issue and...

CVE-2024-57662

CVE-2024-57662 affects virtuoso-opensource (openlink) at version 7.2.11, with the sqlg_hash_source component vulnerable to Denial of Service (DoS) via crafted SQL statements. The CVE has a CVSS v3.1 base score of 7.5 (NETWORK, LOW complexity, NONE privileges, HIGH impact on availability). Connect...

CVE-2024-57638

An issue in the dfebodycopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57643

An issue in the boxdeserializestring component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57654

An issue in the qstvecgetint64 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57656

An issue in the sqlcadddistinctnode component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57660

An issue in the sqloexpandjts component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57662

An issue in the sqlghashsource component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57652

An issue in the numerictodv component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57641

An issue in the sqlexp component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57653

An issue in the qstvecsetcopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57643

An issue in the boxdeserializestring component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57644

An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57659

CVE-2024-57659 affects Virtuoso Open-Source (virtuoso-opensource) in the sqlg_parallel_ts_seq component of version 7.2.11, enabling a Denial of Service via crafted SQL statements. The connected advisories indicate affected package updates to Virtuoso Open-Source 7.2.14 (and debuginfo) for AL2, wi...

CVE-2024-57640

The CVE-2024-57640 entry affects virtuoso-opensource v7.2.11: the dc_add_int component allows an attacker to trigger a Denial of Service via crafted SQL statements. The connected Amazon Linux 2 advisories (ALAS/ALAS2-2025-2755) list this CVE among several DoS issues and specify a patch path to Vi...

CVE-2024-57635

CVE-2024-57635 affects the Virtuoso Open-Source stack in the package family virtuoso-opensource. The connected sources confirm a vulnerability in the chash_array component of openlink virtuoso-opensource v7.2.11 that allows an attacker to trigger a Denial of Service (DoS) via crafted SQL statemen...

CVE-2024-57646

CVE-2024-57646 affects the psiginfo component of openlink virtuoso-opensource v7.2.11, enabling a Denial of Service via crafted SQL statements. Connected advisories (ALAS-2025-2755 / ALAS2-2025-2755) document remediation by upgrading virtuoso-opensource to 7.2.14-2 (and related packages). Remedia...

CVE-2024-57645

CVE-2024-57645 affects openlink virtuoso-opensource v7.2.11, specifically the qi_inst_state_free component, and allows a Denial of Service via crafted SQL statements. The issue is documented across multiple feeds (NVD/NIST, Red Hat/CVE, OSV, Amazon Linux advisories) with remediation guidance in t...

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform from OpenLink Software open source. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...