PT-2023-25554 · Monetdb+1 · Monetdb Server+1

CVE-2023-36366 · Publicado 2015-01-23 · Atualizado 2024-12-02

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MonetDB Server versions 11.45.17 through 11.46.0

Description The issue in the log create delta component allows attackers to cause Denial of Service (DoS) via crafted SQL statements.

Recommendations For MonetDB Server versions 11.45.17 through 11.46.0, consider restricting the execution of crafted SQL statements to minimize the risk of Denial of Service (DoS) until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

ALT-PU-2015-1074

CVE-2023-36366

Produtos afetados

Alt Linux

Monetdb Server

Referências · 4

• 🔥 https://github.com/MonetDB/MonetDB/issues/7381 · Exploit
• https://osv.dev/vulnerability/CVE-2023-36366 · Aviso do Fabricante
• https://t.me/cvenotify/102807 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-36366 · Nota de Segurança