Fluid Attacks Database

Description

An issue in the bif_mod component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	virtuoso-opensource	=7.2.12+dfsg-0.1 \|\| =7.2.12+dfsg-0.2 \|\| =7.2.12+dfsg-1 \|\| =7.2.12+dfsg-2 \|\| =7.2.12+dfsg-3 \|\| =7.2.12+dfsg-4 \|\| =7.2.5.1+dfsg1-0.1 \|\| =7.2.5.1+dfsg1-0.2 \|\| =7.2.5.1+dfsg1-0.3 \|\| =7.2.5.1+dfsg1-0.4 \|\| =7.2.5.1+dfsg1-0.5 \|\| =7.2.5.1+dfsg1-0.6 \|\| =7.2.5.1+dfsg1-0.7 \|\| =7.2.5.1+dfsg1-0.8	-
debian 12	virtuoso-opensource	=7.2.12+dfsg-0.1 \|\| =7.2.12+dfsg-0.2 \|\| =7.2.12+dfsg-1 \|\| =7.2.12+dfsg-2 \|\| =7.2.12+dfsg-3 \|\| =7.2.12+dfsg-4 \|\| =7.2.5.1+dfsg1-0.3 \|\| =7.2.5.1+dfsg1-0.4 \|\| =7.2.5.1+dfsg1-0.5 \|\| =7.2.5.1+dfsg1-0.6 \|\| =7.2.5.1+dfsg1-0.7 \|\| =7.2.5.1+dfsg1-0.8	-
debian 13	virtuoso-opensource	>=0 <7.2.12+dfsg-0.2	7.2.12+dfsg-0.2
debian 14	virtuoso-opensource	>=0 <7.2.12+dfsg-0.2	7.2.12+dfsg-0.2
rpm rhel7	virtuoso-opensource	-	-

Aliases

1. CVE-2023-316162. NVD-2023-316163. OSV-DEBIAN-2023-316164. OSV-2023-316165. SECURITY-TRACKER-CVE-2023-31616

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.