CVE-2024-57635

Summary

CVE-2024-57635 is a newly disclosed vulnerability affecting the chash_array component in openlink virtuoso-opensource version 7.2.11. Maliciously crafted SQL statements can be used by attackers to trigger a Denial of Service (DoS) condition, causing the software to become unresponsive and disrupting its normal operation. The exact cause of the vulnerability is not disclosed, but it is recommended that users update to a patched version of the software to mitigate the risk. Failure to address this issue may result in significant downtime and potential data loss.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.