CVE catalog

CVE-2023-31610

Virtuoso Open-Source Edition vulnerabilities

An issue in the _IO_default_xsputn component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: May 15, 2023, 3:15:11 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.91% · Oct 27, 2026

Projects and upstream resources

[virtuoso-opensource][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "virtuoso-opensource",
      "status": "fixed",
      "release": "sid",
      "version": "7.2.12+dfsg-4"
    },
    {
      "name": "virtuoso-opensource",
      "status": "fixed",
      "release": "forky",
      "version": "7.2.12+dfsg-4"
    },
    {
      "name": "virtuoso-opensource",
      "status": "fixed",
      "release": "trixie",
      "version": "7.2.12+dfsg-2"
    },
    {
      "name": "virtuoso-opensource",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "7.2.5.1+dfsg1-0.3"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1036467,
      "name": "virtuoso-opensource",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "7.2.12+dfsg-0.2"
    },
    {
      "bug": 1036467,
      "name": "virtuoso-opensource",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "7.2.12+dfsg-0.2"
    },
    {
      "bug": 1036467,
      "name": "virtuoso-opensource",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "7.2.12+dfsg-0.2"
    },
    {
      "bug": 1036467,
      "name": "virtuoso-opensource",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "virtuoso-opensource",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "not yet fixed"
    },
    {
      "name": "virtuoso-opensource",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "libvirtodbc0",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "libvirtuoso5.5-cil",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-minimal",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-opensource-7",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-opensource-7-bin",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-opensource-7-common",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-server",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vad-bpel",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vad-conductor",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vad-demo",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vad-doc",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vad-isparql",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vad-ods",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vad-rdfmappers",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vad-sparqldemo",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vad-syncml",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vad-tutorial",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    },
    {
      "name": "virtuoso-vsp-startpage",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "7.2.5.1+dfsg1-0.8ubuntu0.1~esm1"
    }
  ]
}

[Debian bug #1036467]

Publisher notes

[bookworm] virtuoso-opensource: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libvirtodbc0]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · amd64 · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · arm64 · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[libvirtuoso5.5-cil]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · amd64 · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · arm64 · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-minimal]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-opensource]Unknown
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-opensource-7]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · amd64 · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · arm64 · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-opensource-7-bin]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · amd64 · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · arm64 · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-opensource-7-common]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · amd64 · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · arm64 · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-server]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vad-bpel]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vad-conductor]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vad-demo]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vad-doc]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vad-isparql]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vad-ods]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vad-rdfmappers]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vad-sparqldemo]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vad-syncml]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vad-tutorial]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
[virtuoso-vsp-startpage]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  usn · virtuoso-opensource · debian · bookworm; usn · virtuoso-opensource · debian · 12

[Debian 13 (Trixie)]

[libvirtodbc0]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.12+dfsg-2 · amd64 · trixie
  Fixed · Fixed: 7.2.12+dfsg-0.2
  usn · virtuoso-opensource · debian · 13
- 7.2.12+dfsg-2 · arm64 · trixie
  Fixed · Fixed: 7.2.12+dfsg-0.2
  usn · virtuoso-opensource · debian · 13

Next results

Observed: Oct 28, 2026, 5:46:36 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [Ubuntu Security Notices (USN)]