An issue in the artm_div_int component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6832-1 advisory.

    Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL     statements. An attacker could possibly use this issue to crash the program, resulting in a denial of     service. (CVE-2023-31607, CVE-2023-31608, CVE-2023-31609, CVE-2023-31610, CVE-2023-31611, CVE-2023-31616,     CVE-2023-31617, CVE-2023-31618, CVE-2023-31619, CVE-2023-31623, CVE-2023-31625, CVE-2023-31628)

    Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL     statements. An attacker could possibly use this issue to crash the program, resulting in a denial of     service. This issue only affects Ubuntu 22.04 LTS, Ubuntu 23.10 and Ubuntu 24.04 LTS. (CVE-2023-31612,     CVE-2023-31613, CVE-2023-31614, CVE-2023-31615)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

ID	Name	Product	Family	Severity
200473	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 / 24.04 LTS : Virtuoso Open-Source Edition vulnerabilities (USN-6832-1)	Nessus	Ubuntu Local Security Checks	high
195509	RHEL 7 : virtuoso-opensource (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2023-31608

high

Tenable Plugins

high

high