MonetDB Server Denial-of-Service Vulnerability in vscanf Component

A denial-of-service vulnerability has been identified in the vscanf component of MonetDB Server version 11.47.11. This issue allows attackers to cause the server to crash by sending specially crafted SQL statements. The vulnerability can be reproduced by executing a SQL query that improperly parses interval data, leading to a server crash.

Impact

Exploitation of this vulnerability causes the MonetDB server to crash, disrupting any active database sessions and requiring a manual restart of the server.

Reproduction

The vulnerability can be reproduced by running a specific SQL query that casts a crafted string as an interval. This query can be executed using the MonetDB command-line client, mclient, after setting up a MonetDB server instance in a Docker container with the appropriate version.

Remediation

A fix for this vulnerability has been implemented and is available in the MonetDB Dec2023-SP1 release.