CVEvulnerability

CVE-2025-61028

7.5 HIGH Published 2026-06-23 Modified 2026-10-06 Official page ↗

Status: Deferred
Published: 2026-06-23
Last modified: 2026-10-06
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-770, CWE-89

Description

An issue in the time_t_to_dt component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

Related

Weakness · CWE (2)

CWE-770 Allocation of Resources Without Limits or Throttling weakness
CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References

https://github.com/openlink/virtuoso-opensource/issues/1233 github.com
https://access.redhat.com/security/cve/CVE-2025-61028 access.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2491830 bugzilla.redhat.com
https://github.com/openlink/virtuoso-opensource/issues/1233 github.com
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-61028.json security.access.redhat.com