MonetDB Server Denial-of-Service Vulnerability in exps_card Component

A denial-of-service vulnerability has been identified in the exps_card component of MonetDB Server version 11.49.1. This issue allows attackers to cause the server to crash by sending crafted SQL statements. The vulnerability can be reproduced in a Docker environment using the MonetDB/MonetDB:Dec2023 image.

Impact

Exploitation of this vulnerability leads to a crash of the MonetDB server process, causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by creating a SQL file with a specific DELETE statement that includes a subquery. This SQL file can then be executed using the MonetDB command-line client (mclient) within a Docker container running the affected MonetDB version.

Remediation

Users can update to the latest version of MonetDB where this issue has been fixed.