CVE-2023-48951

Name of the Vulnerable Software and Affected Versions virtuoso-opensource version 7.2.11

Description The issue is related to the box equal function in virtuoso-opensource, which can be exploited by attackers to cause a Denial of Service (DoS) after running a SELECT statement. The vulnerability is associated with the incorrect implementation of the sequence of actions performed. Exploitation of the vulnerability may allow a remote attacker to cause a denial of service.

Recommendations For virtuoso-opensource version 7.2.11, consider disabling the box equal function as a temporary workaround until a patch is available. Restrict access to the SELECT statement to minimize the risk of exploitation.