Skip to content
OpenAdvisories
High ALAS2-2024-2383 4 CVEs

Important: virtuoso-opensource security update (Amazon Linux 2)

Published Jan 3, 2024 · Updated Jan 9, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-48952: An issue in the box_deserialize_reusing function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement. CVE-2023-48951: An issue in the box_equal function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement. CVE-2023-48949: An issue in the box_add function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement. CVE-2023-48948: An issue in the box_div function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 virtuoso-opensource 2:7.2.11-2.amzn2.0.1
Amazon Linux · 2 virtuoso-opensource-debuginfo 2:7.2.11-2.amzn2.0.1

Vulnerabilities 4

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-48948.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-48949.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-48951.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-48952.html