CVE catalog

CVE-2024-57636

virtuoso-opensource affected and fixed versions

An issue in the itc_sample_row_check component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: Jan 1, 2024, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.92% · Oct 27, 2026

Projects and upstream resources

[virtuoso-opensource][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "virtuoso-opensource",
      "status": "fixed",
      "release": "sid",
      "version": "7.2.12+dfsg-4"
    },
    {
      "name": "virtuoso-opensource",
      "status": "fixed",
      "release": "forky",
      "version": "7.2.12+dfsg-4"
    },
    {
      "name": "virtuoso-opensource",
      "status": "fixed",
      "release": "trixie",
      "version": "7.2.12+dfsg-2"
    },
    {
      "name": "virtuoso-opensource",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "7.2.5.1+dfsg1-0.3"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "virtuoso-opensource",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "7.2.12+dfsg-0.2"
    },
    {
      "bug": null,
      "name": "virtuoso-opensource",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "7.2.12+dfsg-0.2"
    },
    {
      "bug": null,
      "name": "virtuoso-opensource",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "7.2.12+dfsg-0.2"
    },
    {
      "bug": null,
      "name": "virtuoso-opensource",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": []
}

Publisher notes

[bookworm] virtuoso-opensource: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libvirtodbc0]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · amd64 · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · arm64 · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[libvirtuoso5.5-cil]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · amd64 · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · arm64 · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-minimal]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-opensource]Unknown
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-opensource-7]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · amd64 · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · arm64 · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-opensource-7-bin]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · amd64 · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · arm64 · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-opensource-7-common]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · amd64 · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · arm64 · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-server]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vad-bpel]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vad-conductor]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vad-demo]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vad-doc]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vad-isparql]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vad-ods]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vad-rdfmappers]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vad-sparqldemo]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vad-syncml]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vad-tutorial]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
[virtuoso-vsp-startpage]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12
- 7.2.5.1+dfsg1-0.3 · all · bookworm
  Affected
  dsa · virtuoso-opensource · debian · bookworm; dsa · virtuoso-opensource · debian · 12

[Debian 13 (Trixie)]

[libvirtodbc0]Unknown
Source package: [virtuoso-opensource]
Details (2)
- 7.2.12+dfsg-2 · amd64 · trixie
  Fixed · Fixed: 7.2.12+dfsg-0.2
  dsa · virtuoso-opensource · debian · 13
- 7.2.12+dfsg-2 · arm64 · trixie
  Fixed · Fixed: 7.2.12+dfsg-0.2
  dsa · virtuoso-opensource · debian · 13

Next results

Observed: Oct 26, 2026, 11:31:25 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]