PT-2023-8881 · Openlink+2 · Virtuoso-Opensource+2
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
openlink virtuoso-opensource version 7.2.11
Description
The issue is related to the
box add function in the virtuoso-opensource platform, which allows attackers to cause a Denial of Service (DoS) after running a SELECT statement. This is due to insufficient input validation, enabling a remote attacker to exploit the issue and cause a service disruption.Recommendations
For openlink virtuoso-opensource version 7.2.11, consider disabling the
box add function as a temporary workaround until a patch is available to prevent potential Denial of Service (DoS) attacks.Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Debian
Red Os
Virtuoso-Opensource