VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 23, 2026· Updated Jun 23, 2026

CVE-2025-61029

CVE-2025-61029

Description

An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Patches

Vulnerability mechanics

Root cause

"Missing input validation or improper handling of deeply nested subqueries in the `sqlo_untry` function during SQL compilation leads to a crash."

Attack vector

An attacker sends a crafted `CREATE TABLE` statement containing a complex `CHECK` constraint with nested subqueries, arithmetic expressions, and `CASE`/`IN` clauses [ref_id=1]. The statement is submitted via the `isql` client to the Virtuoso server on port 1111. The malformed SQL causes a crash in the `sqlo_untry` function during query compilation, resulting in a denial of service. No authentication is required beyond the default DBA credentials used in the reproduction steps.

Affected code

The crash occurs in the `sqlo_untry` function (frame #0 of the backtrace), called from `sqlo_layout_1` and `sqlo_top_2` during SQL statement compilation. The issue is triggered when the DDL parser processes a crafted `CREATE TABLE` statement with deeply nested subqueries inside `CHECK` constraints, ultimately reaching `ddl_table_check_constraints_define_triggers` (frame #8).

What the fix does

The advisory does not include a patch. The vendor has been notified via the GitHub issue [ref_id=1], but no fix commit or remediation guidance is published as of the advisory date. Users should monitor the upstream repository for a future patch or restrict access to the DDL interface to trusted clients only.

Preconditions

  • networkThe attacker must be able to connect to the Virtuoso server and execute arbitrary SQL statements (e.g., via isql on port 1111).
  • authThe default DBA credentials (dba/dba) are used in the reproduction, but any user with DDL privileges could trigger the crash.

Generated on Jun 24, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

1

News mentions

0

No linked articles in our index yet.