CVE-2025-61024

A flaw was found in virtuoso-opensource. An attacker could send specially crafted SQL (Structured Query Language) statements to a specific component, sqlo_try_in_loop, leading to a Denial of Service (DoS). This could make the service unavailable to legitimate users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To reduce the attack surface, restrict network access to the virtuoso-opensource service to only trusted clients using firewall rules. If the virtuoso-opensource service is not actively used, consider disabling it.

To disable the service: sudo systemctl stop virtuoso-opensource sudo systemctl disable virtuoso-opensource

Applying firewall rules to limit access to the service's port (e.g., 1111/tcp) from specific trusted IP addresses can also reduce exposure.

sudo firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="<TRUSTED_IP_ADDRESS>" port port="1111" protocol="tcp" accept' sudo firewall-cmd --reload

Disabling the service will prevent its functionality. A service restart or system reboot may be required for changes to take full effect.