CVE-2023-48946

Summary

CVE-2023-48946 is a newly discovered vulnerability in the openlink virtuoso-opensource version 7.2.11. This issue lies in the box_mpy function, which can be exploited by attackers to trigger a Denial of Service (DoS) condition. By executing a carefully crafted SELECT statement, an attacker can cause the application to become unresponsive, resulting in a denial of service to legitimate users. This vulnerability poses a significant risk to systems running the affected version of virtuoso-opensource and requires immediate attention from administrators.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.