PT-2023-9515 · Openlink+4 · Openlink Virtuoso-Opensource+4
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
openlink virtuoso-opensource version 7.2.9
Description
The issue is related to the artm div int component of openlink virtuoso-opensource, where improper neutralization of special elements in SQL commands can be exploited. Attackers can cause a Denial of Service (DoS) via crafted SQL statements. This can be exploited by a remote attacker using specially crafted SQL operators.
Recommendations
For openlink virtuoso-opensource version 7.2.9, consider disabling the
artm div int component or restricting the use of crafted SQL statements until a patch is available. Avoid using specially crafted SQL operators in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Debian
Linuxmint
Red Os
Ubuntu
Openlink Virtuoso-Opensource