Fluid Attacks Database

Description

An issue in the itc_hash_compare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	virtuoso-opensource	=7.2.12+dfsg-0.1 \|\| =7.2.12+dfsg-0.2 \|\| =7.2.12+dfsg-1 \|\| =7.2.12+dfsg-2 \|\| =7.2.12+dfsg-3 \|\| =7.2.12+dfsg-4 \|\| =7.2.5.1+dfsg1-0.1 \|\| =7.2.5.1+dfsg1-0.2 \|\| =7.2.5.1+dfsg1-0.3 \|\| =7.2.5.1+dfsg1-0.4 \|\| =7.2.5.1+dfsg1-0.5 \|\| =7.2.5.1+dfsg1-0.6 \|\| =7.2.5.1+dfsg1-0.7 \|\| =7.2.5.1+dfsg1-0.8	-
debian 12	virtuoso-opensource	=7.2.12+dfsg-0.1 \|\| =7.2.12+dfsg-0.2 \|\| =7.2.12+dfsg-1 \|\| =7.2.12+dfsg-2 \|\| =7.2.12+dfsg-3 \|\| =7.2.12+dfsg-4 \|\| =7.2.5.1+dfsg1-0.3 \|\| =7.2.5.1+dfsg1-0.4 \|\| =7.2.5.1+dfsg1-0.5 \|\| =7.2.5.1+dfsg1-0.6 \|\| =7.2.5.1+dfsg1-0.7 \|\| =7.2.5.1+dfsg1-0.8	-
debian 13	virtuoso-opensource	>=0 <7.2.12+dfsg-0.2	7.2.12+dfsg-0.2
debian 14	virtuoso-opensource	>=0 <7.2.12+dfsg-0.2	7.2.12+dfsg-0.2

Aliases

1. CVE-2024-576442. NVD-2024-576443. OSV-DEBIAN-2024-576444. OSV-2024-576445. SECURITY-TRACKER-CVE-2024-57644

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.