MonetDB Server Denial-of-Service Vulnerability in exp_copy Component

A denial-of-service vulnerability has been identified in MonetDB Server version 11.49.1, specifically within the exp_copy component. This issue allows attackers to cause the server to crash by sending crafted SQL statements. The vulnerability can be reproduced in a Docker container running Ubuntu 20.04.

Impact

Exploitation of this vulnerability leads to a crash of the MonetDB server process, causing a denial-of-service condition where the server is no longer available to handle requests.

Reproduction

The vulnerability can be reproduced by creating a table and then deleting from it with a SQL statement that includes a subquery. This crafted SQL statement causes the server to crash. The issue can be automated with a shell script that runs the SQL command using the MonetDB client, mclient, and then checks if the server process is still running.

Remediation

Users can update to the latest version of MonetDB Server, as this vulnerability has been addressed in the December 2023 release.