Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-61018

Опубликовано: 23 июн. 2026
Источник: redhat
CVSS3: 7.5

Описание

An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

A flaw was found in openlink virtuoso-opensource. This vulnerability allows attackers to cause a Denial of Service (DoS) by sending specially crafted SQL statements to the sqlo_place_dt_set component. A successful exploit could make the service unavailable to legitimate users.

Отчет

Although virtuoso-opensource is shipped with RHEL 7 Extended Lifecycle Support (ELS), the vulnerable code is completely absent from the package. Therefore, Red Hat products are not impacted by this vulnerability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 7virtuoso-opensourceNot affected

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-89
https://bugzilla.redhat.com/show_bug.cgi?id=2491820virtuoso-opensource: Openlink Virtuoso-opensource: Denial of Service via crafted SQL statements in sqlo_place_dt_set

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 месяцев назад

An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS3: 7.5
nvd
около 2 месяцев назад

An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVSS3: 7.5
debian
около 2 месяцев назад

An issue in the sqlo_place_dt_set component of openlink virtuoso-opens ...

CVSS3: 7.5
github
около 2 месяцев назад

An issue in the sqlo_place_dt_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

7.5 High

CVSS3