CVE-2024-57644

Summary

CVE-2024-57644 is a newly disclosed vulnerability affecting the itc_hash_compare component in openlink virtuoso-opensource version 7.2.11. This issue permits attackers to execute Denial of Service (DoS) attacks through specifically crafted SQL statements. By exploiting this vulnerability, an adversary can cause the application to become unresponsive or crash, leading to service disruption for the affected system. The exact cause of the DoS is not detailed, but it highlights the importance of keeping open-source software up-to-date with the latest security patches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.