PT-2025-3504 · Openlink+2 · Openlink Virtuoso-Opensource+2
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
openlink virtuoso-opensource version 7.2.11
Description
The issue in the
dfe unit gb dependant component allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.Recommendations
For openlink virtuoso-opensource version 7.2.11, consider restricting the use of the
dfe unit gb dependant component until a patch is available. As a temporary workaround, avoid using crafted SQL statements that may trigger the Denial of Service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Debian
Red Os
Openlink Virtuoso-Opensource