Skip to content
OpenAdvisories
Medium ALAS2-2023-2360 19 CVEs

Moderate: virtuoso-opensource security update (Amazon Linux 2)

Published Nov 29, 2023 · Updated Mar 13, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-31631: An issue in the sqlo_preds_contradiction component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31630: An issue in the sqlo_query_spec component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31629: An issue in the sqlo_union_scope component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31628: An issue in the stricmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31627: An issue in the strhash component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31625: An issue in the psiginfo component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31624: An issue in the sinv_check_exp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31623: An issue in the mp_box_copy component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31622: An issue in the sqlc_make_policy_trig component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31621: An issue in the kc_var_col component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31620: An issue in the dv_compare component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31619: An issue in the sch_name_to_object component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31618: An issue in the sqlc_union_dt_wrap component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31617: An issue in the dk_set_delete component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31616: An issue in the bif_mod component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31611: An issue in the __libc_longjmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31610: An issue in the _IO_default_xsputn component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31609: An issue in the dfe_unit_col_loci component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. CVE-2023-31607: An issue in the __libc_malloc component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 virtuoso-opensource 2:7.2.11-1.amzn2.0.2
Amazon Linux · 2 virtuoso-opensource-debuginfo 2:7.2.11-1.amzn2.0.2

Vulnerabilities 19

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31607.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31609.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31610.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31611.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31616.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31617.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31618.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31619.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31620.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31621.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31622.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31623.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31624.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31625.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31627.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31628.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31629.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31630.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-31631.html