Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-48952
HistoryNov 29, 2023 - 12:00 a.m.

CVE-2023-48952

2023-11-2900:00:00
ubuntu.com
ubuntu.com
17
security issue
box deserialize reusing
virtuoso-opensource v7.2.11
denial of service
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

EPSS

0.001

Percentile

17.0%

An issue in the box_deserialize_reusing function in openlink
virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service
(DoS) after running a SELECT statement.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

EPSS

0.001

Percentile

17.0%