EUVD-2025-210319
GHSA-pcq2-xgpf-f8cv
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Network-reachable SQL/SPARQL endpoint, no auth or interaction implied by description; impact limited to process crash, so C:N/I:N/A:H.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
3DescriptionCVE.org
An issue in the sslr_qst_get component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
AnalysisAI
Denial of service in OpenLink Virtuoso OpenSource v7.2.11 allows remote attackers to crash the database server by submitting crafted SQL statements that trigger a fault in the sslr_qst_get component. The flaw is classified under CWE-89 (SQL injection class) but the documented impact is availability-only with no confidentiality or integrity loss per the CVSS vector. No public exploit identified at time of analysis, and the issue is tracked only via an upstream GitHub issue (#1229) rather than a tagged fixed release.
Technical ContextAI
Virtuoso OpenSource is a hybrid relational/RDF/graph database server developed by OpenLink Software, commonly used as a SPARQL endpoint backing semantic web and Linked Data deployments (e.g., DBpedia). The vulnerable routine sslr_qst_get is part of Virtuoso's SQL/SPARQL query state handling layer, which manages SQL-level result/state objects during statement execution. CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) is the parent class, but the manifestation here is not data exfiltration - instead, malformed SQL elements reach a code path in sslr_qst_get that fails unsafely, terminating the server process or thread and producing a denial-of-service condition.
RemediationAI
No vendor-released patch identified at time of analysis - the only public tracking artifact is upstream GitHub issue https://github.com/openlink/virtuoso-opensource/issues/1229, with no tagged release advertised as fixing sslr_qst_get. Monitor the openlink/virtuoso-opensource repository for a commit or 7.2.12+ release referencing this issue and upgrade once published. Compensating controls: restrict network access to the Virtuoso SQL port (default 1111) and any HTTP/SPARQL listener (default 8890) to trusted clients via firewall or reverse proxy; enforce authentication on SPARQL endpoints by disabling the default anonymous SPARQL user's ability to issue arbitrary SQL (revoke SPARQL_UPDATE and similar roles), accepting reduced functionality for public Linked Data consumers; deploy a SQL/SPARQL-aware proxy or WAF to drop malformed statements, noting this is brittle without a known trigger payload; run virtuoso-t under a process supervisor (systemd Restart=on-failure) so a DoS crash self-recovers, accepting brief outages and possible repeated triggering.
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Unauthenticated remote OS command injection in MeiG Smart FORGE_SLT711 cellular gateway firmware MDM9607.LE.1.0-00110-ST
Unauthenticated API access in LalanaChami Pharmacy Management System (commit 5c3d028) allows remote attackers to dump al
In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write o
Giflib 5.2.2 contains a buffer overflow in the EGifGCBToExtension function that fails to validate allocated memory when
Denial of service in GPAC's MP4Box multimedia tool (versions before 26.02.0) arises from a use-after-free in the gf_sei_
Arbitrary kernel memory read/write in Realtek rtl819x Jungle SDK Wi-Fi driver allows local unprivileged attackers to acc
Denial of service in GPAC's MP4Box/libgpac media importer (versions before 26.02.0) lets an attacker crash the tool by s
An issue in the parse_month function (/time/strptime.rs) of relibc commit ab6a2e allows attackers to cause a Denial of S
Denial of service in relibc (the Redox OS C standard library) at commit 61f42d allows attackers to crash a process by ge
An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denial of S
Denial of service in relibc (the Redox OS C standard library implementation, commit 61f42d) lets attackers crash a proce
Same weakness CWE-89 – SQL Injection
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today