CVE-2024-57638

An issue in the dfebodycopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57636

An issue in the itcsamplerowcheck component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57644

An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57641

An issue in the sqlexp component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57652

An issue in the numerictodv component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57647

An issue in the rowinsertcast component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57645

An issue in the qiinststatefree component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57657

An issue in the sqlgvecupd component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57645

An issue in the qiinststatefree component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57661

An issue in the sqlodf component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57646

CVE-2024-57646 affects the psiginfo component of openlink virtuoso-opensource v7.2.11, enabling a Denial of Service via crafted SQL statements. Connected advisories (ALAS-2025-2755 / ALAS2-2025-2755) document remediation by upgrading virtuoso-opensource to 7.2.14-2 (and related packages). Remedia...

CVE-2024-57648

CVE-2024-57648 affects virtuoso-opensource v7.2.11 (itc_set_param_row) and allows Denial of Service via crafted SQL statements. Affected package in Amazon Linux 2 advisories, remediation is to update to virtuoso-opensource 7.2.14-2 (or newer) per ALAS/ALAS2 advisories. CVSS v3.1 base score 7.5 (H...

CVE-2024-57635

CVE-2024-57635 affects the Virtuoso Open-Source stack in the package family virtuoso-opensource. The connected sources confirm a vulnerability in the chash_array component of openlink virtuoso-opensource v7.2.11 that allows an attacker to trigger a Denial of Service (DoS) via crafted SQL statemen...

CVE-2024-57645

CVE-2024-57645 affects openlink virtuoso-opensource v7.2.11, specifically the qi_inst_state_free component, and allows a Denial of Service via crafted SQL statements. The issue is documented across multiple feeds (NVD/NIST, Red Hat/CVE, OSV, Amazon Linux advisories) with remediation guidance in t...

CVE-2024-57653

An issue in the qstvecsetcopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57662

CVE-2024-57662 affects virtuoso-opensource (openlink) at version 7.2.11, with the sqlg_hash_source component vulnerable to Denial of Service (DoS) via crafted SQL statements. The CVE has a CVSS v3.1 base score of 7.5 (NETWORK, LOW complexity, NONE privileges, HIGH impact on availability). Connect...

CVE-2024-57636

CVE-2024-57636 affects virtuoso-opensource v7.2.11, specifically the itc_sample_row_check component, allowing Denial of Service via crafted SQL statements. Public advisories (ALAS/ALAS2-2025-2755) confirm the DoS issue and list remediation: update to virtuoso-opensource 7.2.14-2 (and correspondin...

CVE-2024-57660

CVE-2024-57660 affects virtuoso-opensource v7.2.11 (sqlo_expand_jts). The vulnerability allows remote attackers to cause a Denial of Service via crafted SQL statements. Root cause is an issue in the sqlo_expand_jts component, leading to availability impact. Public advisories confirm the issue and...

CVE-2024-57659

CVE-2024-57659 affects Virtuoso Open-Source (virtuoso-opensource) in the sqlg_parallel_ts_seq component of version 7.2.11, enabling a Denial of Service via crafted SQL statements. The connected advisories indicate affected package updates to Virtuoso Open-Source 7.2.14 (and debuginfo) for AL2, wi...

CVE-2024-57652

An issue in the numerictodv component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...