CVE-2023-48948

Summary

CVE-2023-48948 is a newly discovered vulnerability affecting the box_div function in openlink virtuoso-opensource version 7.2.11. This issue enables attackers to initiate a Denial of Service (DoS) attack. By executing a malicious SELECT statement, they can cause the application to become unresponsive, leading to a service disruption. The exact cause of the vulnerability is not explicitly stated, but it appears to involve improper handling of certain input or data in the box_div function. This issue poses a significant risk for organizations using this version of openlink virtuoso-opensource, as it can result in a complete loss of availability and potentially disrupt business operations. Organizations are encouraged to apply the available patch or upgrade to a newer, secure version of the software as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.