CVE-2024-57652

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jan 14, 2025
Updated: Jan 15, 2025
CWE ID 89

Summary

CVE-2024-57652 is a newly disclosed vulnerability affecting the numeric_to_dv component in openlink virtuoso-opensource version 7.2.11. This issue enables attackers to trigger a Denial of Service (DoS) condition by crafting malicious SQL statements. By exploiting this vulnerability, an attacker can send manipulated data to the system, causing it to crash or become unresponsive, resulting in a disruption of normal business operations. This DoS vulnerability poses a significant risk to organizations using openlink virtuoso-opensource v7.2.11, requiring immediate attention and patching.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Virtuoso-Opensource

Affected Vendors

  • OpenLink Software Inc