CVE-2023-48946: 
Homebrew vulnerability analysis and mitigation

An issue was discovered in the box_mpy function of OpenLink Virtuoso-Opensource version 7.2.11. This vulnerability, identified as CVE-2023-48946, was disclosed on November 29, 2023. The vulnerability affects the core functionality of the database system and allows attackers to cause a Denial of Service (DoS) condition after executing a SELECT statement (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue specifically occurs in the box_mpy function when processing certain SQL SELECT statements, which can trigger a crash in the database server (NVD, GitHub Issue).

When successfully exploited, this vulnerability results in a Denial of Service condition, making the database server unavailable to legitimate users. The impact is particularly significant as it affects the availability of the database system without requiring any special privileges or user interaction (NVD).

The vulnerability has been fixed in version 7.2.12 of Virtuoso-Opensource. Users are advised to upgrade to this version or later to mitigate the risk (Debian Tracker).