CVE-2023-36365: 
NixOS vulnerability analysis and mitigation

An issue in the sql_trans_copy_key component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements (NVD). The vulnerability was discovered and disclosed on June 22, 2023.

The vulnerability exists in the sql_trans_copy_key component and can be triggered through specific SQL operations involving temporary tables and foreign key constraints. The issue has a CVSS v3.1 Base Score of 7.5 HIGH (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The vulnerability is classified under CWE-770 (Allocation of Resources Without Limits or Throttling) (NVD).

When successfully exploited, the vulnerability can cause the MonetDB server to crash, resulting in a denial of service condition. This affects the availability of the database service, potentially disrupting operations that depend on database access (Github Issue).

The vulnerability can be exploited by sending crafted SQL statements to the database server. A proof-of-concept exploit involves executing specific SQL commands including transactions with temporary tables and foreign key references. The attack can be performed remotely and requires no authentication (Github Issue).

The affected versions are MonetDB Server v11.45.17 and v11.46.0. Users should upgrade to a patched version when available. No specific workarounds have been publicly documented (NVD).