Fluid Attacks Database

Description

An issue in the mp_box_deserialize_string function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	virtuoso-opensource	=7.2.12+dfsg-0.1 \|\| =7.2.12+dfsg-0.2 \|\| =7.2.12+dfsg-1 \|\| =7.2.12+dfsg-2 \|\| =7.2.12+dfsg-3 \|\| =7.2.12+dfsg-4 \|\| =7.2.5.1+dfsg1-0.1 \|\| =7.2.5.1+dfsg1-0.2 \|\| =7.2.5.1+dfsg1-0.3 \|\| =7.2.5.1+dfsg1-0.4 \|\| =7.2.5.1+dfsg1-0.5 \|\| =7.2.5.1+dfsg1-0.6 \|\| =7.2.5.1+dfsg1-0.7 \|\| =7.2.5.1+dfsg1-0.8	-
debian 12	virtuoso-opensource	=7.2.12+dfsg-0.1 \|\| =7.2.12+dfsg-0.2 \|\| =7.2.12+dfsg-1 \|\| =7.2.12+dfsg-2 \|\| =7.2.12+dfsg-3 \|\| =7.2.12+dfsg-4 \|\| =7.2.5.1+dfsg1-0.3 \|\| =7.2.5.1+dfsg1-0.4 \|\| =7.2.5.1+dfsg1-0.5 \|\| =7.2.5.1+dfsg1-0.6 \|\| =7.2.5.1+dfsg1-0.7 \|\| =7.2.5.1+dfsg1-0.8	-
debian 13	virtuoso-opensource	>=0 <7.2.12+dfsg-0.2	7.2.12+dfsg-0.2
debian 14	virtuoso-opensource	>=0 <7.2.12+dfsg-0.2	7.2.12+dfsg-0.2
rpm rhel7	virtuoso-opensource	-	-

Aliases

1. CVE-2023-316142. NVD-2023-316143. OSV-DEBIAN-2023-316144. OSV-2023-316145. SECURITY-TRACKER-CVE-2023-31614

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.