CVE-2024-57658

An issue in the sqltreehash1 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57643

An issue in the boxdeserializestring component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57642

An issue in the dfeinxopcoldeftable component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57662

An issue in the sqlghashsource component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57645

An issue in the qiinststatefree component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57648

An issue in the itcsetparamrow component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57656

An issue in the sqlcadddistinctnode component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57660

An issue in the sqloexpandjts component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57654

An issue in the qstvecgetint64 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57644

An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57652

An issue in the numerictodv component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57636

CVE-2024-57636 affects virtuoso-opensource v7.2.11, specifically the itc_sample_row_check component, allowing Denial of Service via crafted SQL statements. Public advisories (ALAS/ALAS2-2025-2755) confirm the DoS issue and list remediation: update to virtuoso-opensource 7.2.14-2 (and correspondin...

CVE-2024-57646

CVE-2024-57646 affects the psiginfo component of openlink virtuoso-opensource v7.2.11, enabling a Denial of Service via crafted SQL statements. Connected advisories (ALAS-2025-2755 / ALAS2-2025-2755) document remediation by upgrading virtuoso-opensource to 7.2.14-2 (and related packages). Remedia...

CVE-2024-57645

CVE-2024-57645 affects openlink virtuoso-opensource v7.2.11, specifically the qi_inst_state_free component, and allows a Denial of Service via crafted SQL statements. The issue is documented across multiple feeds (NVD/NIST, Red Hat/CVE, OSV, Amazon Linux advisories) with remediation guidance in t...

CVE-2024-57659

CVE-2024-57659 affects Virtuoso Open-Source (virtuoso-opensource) in the sqlg_parallel_ts_seq component of version 7.2.11, enabling a Denial of Service via crafted SQL statements. The connected advisories indicate affected package updates to Virtuoso Open-Source 7.2.14 (and debuginfo) for AL2, wi...

CVE-2024-57643

An issue in the boxdeserializestring component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57653

An issue in the qstvecsetcopy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

CVE-2024-57662

CVE-2024-57662 affects virtuoso-opensource (openlink) at version 7.2.11, with the sqlg_hash_source component vulnerable to Denial of Service (DoS) via crafted SQL statements. The CVE has a CVSS v3.1 base score of 7.5 (NETWORK, LOW complexity, NONE privileges, HIGH impact on availability). Connect...

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform from OpenLink Software open source. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...