Summary
Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly
handled certain crafted SQL statements. An attacker could possibly use
this issue to crash the program, resulting in a denial of service.
(CVE-2023-31620, CVE-2023-31622, CVE-2023-31624, CVE-2023-31626,
CVE-2023-31627, CVE-2023-31629, CVE-2023-31630, CVE-2023-31631,
CVE-2023-48951)
Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly
handled certain crafted SQL statements. An attacker could possibly use
this issue to crash the program, resulting in a denial of service.
This issue only affects Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
(CVE-2023-48945, CVE-2023-48946, CVE-2023-48947, CVE-2023-48950)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | virtuoso-opensource | 6.1.6+repack-0ubuntu5+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | virtuoso-opensource | 6.1.6+repack-0ubuntu9+esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | virtuoso-opensource | 6.1.6+repack-0ubuntu10+esm2 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | virtuoso-opensource | 7.2.5.1+dfsg1-0.2ubuntu0.1~esm2 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | virtuoso-opensource | 7.2.5.1+dfsg1-0.8ubuntu0.1~esm2 |
Vulnerabilities 13
-
High 8.8
An issue in the box_equal function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Servic…
-
High 7.5
An issue in the dv_compare component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Servi…
-
High 7.5
An issue in the sqlc_make_policy_trig component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Deni…
-
High 7.5
An issue in the sinv_check_exp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of S…
-
High 7.5
An issue in the gpf_notice component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Servi…
-
High 7.5
An issue in the strhash component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service …
-
High 7.5
An issue in the sqlo_union_scope component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of…
-
High 7.5
An issue in the sqlo_query_spec component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of …
-
High 7.5
An issue in the sqlo_preds_contradiction component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a D…
-
High 7.5
A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafte…
-
Unscored —
An issue in the box_mpy function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service …
-
Unscored —
An issue in the cha_cmp function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service …
-
Unscored —
An issue in the box_col_len function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Serv…
References
-
report
https://ubuntu.com/security/CVE-2023-31620
-
report
https://ubuntu.com/security/CVE-2023-31622
-
report
https://ubuntu.com/security/CVE-2023-31624
-
report
https://ubuntu.com/security/CVE-2023-31626
-
report
https://ubuntu.com/security/CVE-2023-31627
-
report
https://ubuntu.com/security/CVE-2023-31629
-
report
https://ubuntu.com/security/CVE-2023-31630
-
report
https://ubuntu.com/security/CVE-2023-31631
-
report
https://ubuntu.com/security/CVE-2023-48945
-
report
https://ubuntu.com/security/CVE-2023-48946
-
report
https://ubuntu.com/security/CVE-2023-48947
-
report
https://ubuntu.com/security/CVE-2023-48950
-
report
https://ubuntu.com/security/CVE-2023-48951