CVE-2024-57645

Summary

CVE-2024-57645 is a newly identified vulnerability affecting the qi_inst_state_free component in openlink virtuoso-opensource version 7.2.11. This issue permits attackers to execute a Denial of Service (DoS) attack by crafting specific SQL statements. By exploiting this vulnerability, an adversary can cause the application to crash or consume excessive resources, leading to a disruption of services for legitimate users. This vulnerability poses a significant risk to organizations using openlink virtuoso-opensource version 7.2.11 and highlights the importance of applying the available patch or upgrading to a patched version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.