CVE-2024-57663: 
Homebrew vulnerability analysis and mitigation

An issue in the sqlgplacedpipes component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. The vulnerability was discovered and assigned CVE-2024-57663 in January 2025 (NVD, MITRE).

The vulnerability exists in the sqlgplacedpipes component and can be triggered through specially crafted SQL statements involving complex queries with nested SELECT statements and CASE expressions. The issue has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating it is network exploitable with low attack complexity and no privileges required (NVD).

When successfully exploited, the vulnerability results in a Denial of Service condition, affecting the availability of the Virtuoso database service. The impact is limited to service availability with no direct effect on confidentiality or integrity (NVD).

The vulnerability has been fixed in version 7.2.12 of Virtuoso-opensource. Users are advised to upgrade to this version or later to mitigate the risk (Debian Tracker).