CVE-2024-57628
Published: 14 January 2025
Summary
CVE-2024-57628 is a high-severity SQL Injection (CWE-89) vulnerability in Monetdb Monetdb. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 37.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-2 (Flaw Remediation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Timely flaw remediation through patching directly prevents exploitation of the specific DoS vulnerability in MonetDB Server v11.49.1's exp_values_set_supertype component.
Denial-of-service protection mechanisms such as rate limiting or traffic filtering block remote crafted SQL attacks causing availability disruption.
Information input validation on SQL statements mitigates crafted queries exploiting the improper neutralization issue in exp_values_set_supertype.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Remote unauthenticated network exploitation of a public-facing DB server via crafted input directly maps to T1190; resulting availability impact via application crash matches T1499.004.
NVD Description
An issue in the exp_values_set_supertype component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.
Deeper analysisAI
CVE-2024-57628 is a vulnerability in the exp_values_set_supertype component of MonetDB Server version 11.49.1. The issue enables attackers to trigger a Denial of Service (DoS) condition by sending crafted SQL statements. It carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity primarily due to its impact on availability, and is associated with CWE-89 (Improper Neutralization of Special Elements used in an SQL Command).
Remote attackers can exploit this vulnerability over the network with low complexity and no authentication or user interaction required. Successful exploitation results in a DoS, disrupting the availability of the affected MonetDB Server instance while having no impact on confidentiality or integrity.
Mitigation details and further information are available in the referenced GitHub issue at https://github.com/MonetDB/MonetDB/issues/7437, published on 2025-01-14.
Details
- CWE(s)