CVE-2024-57624 – This vulnerability in MonetDB Server's exp

Q: What is the severity of CVE-2024-57624?

CVE-2024-57624 has a CVSS score of 7.5 (HIGH). This vulnerability in MonetDB Server's exp_atom component allows attackers to execute crafted SQL statements that cause a Denial of Service (DoS) by crashing or hanging the database server. It affects organizations running MonetDB Server v11.49.1. The vulnerability is a SQL injection flaw (CWE-89) with a CVSS score of 7.5.

📋 TL;DR

This vulnerability in MonetDB Server's exp_atom component allows attackers to execute crafted SQL statements that cause a Denial of Service (DoS) by crashing or hanging the database server. It affects organizations running MonetDB Server v11.49.1. The vulnerability is a SQL injection flaw (CWE-89) with a CVSS score of 7.5.

💻 Affected Systems

Products:

MonetDB Server

Versions: v11.49.1

Operating Systems: All platforms running MonetDB

Default Config Vulnerable: ⚠️ Yes

Notes: Any MonetDB Server instance running the affected version is vulnerable regardless of configuration.

📦 What is this software?

Monetdb by Monetdb

View all CVEs affecting Monetdb →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete database server outage leading to application downtime and data unavailability until service is restored.

🟠

Likely Case

Intermittent service disruptions affecting database-dependent applications and users.

🟢

If Mitigated

Minimal impact with proper input validation and query sanitization in place.

🌐 Internet-Facing: HIGH - Internet-facing MonetDB instances are directly exposed to crafted SQL attacks.

🏢 Internal Only: MEDIUM - Internal attackers or compromised systems could still exploit this vulnerability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Exploitation requires SQL injection knowledge and ability to execute arbitrary SQL against the database.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Version after v11.49.1 (check GitHub issue for specific fixed version)

Vendor Advisory: https://github.com/MonetDB/MonetDB/issues/7433

Restart Required: No

Instructions:

1. Check the GitHub issue for the specific fixed version. 2. Upgrade MonetDB Server to the patched version. 3. Test the upgrade in a non-production environment first.

🔧 Temporary Workarounds

Input Validation and Sanitization

all

Implement strict input validation and SQL query sanitization for all user-supplied data before passing to MonetDB.

Network Access Restrictions

all

Restrict network access to MonetDB Server to only trusted applications and users.

🧯 If You Can't Patch

Implement strict input validation and parameterized queries in all applications accessing the database.
Deploy network segmentation and firewall rules to limit database access to only necessary systems.

🔍 How to Verify

Check if Vulnerable:

Check MonetDB version: mclient --version or SELECT * FROM sys.version();

Check Version:

mclient --version

Verify Fix Applied:

Verify version is newer than v11.49.1 and test with previously problematic SQL queries.

📡 Detection & Monitoring

Log Indicators:

Database crash logs
Unexpected service restarts
SQL error messages containing exp_atom references

Network Indicators:

Unusual SQL query patterns
Multiple failed connection attempts followed by service disruption

SIEM Query:

source="monetdb.log" AND ("crash" OR "segfault" OR "exp_atom")

📊 Metadata

CVE ID: CVE-2024-57624

CVSS v3 Score: 7.5 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE: CWE-89

EPSS Score: 0.3% exploit probability (53.2th percentile)

Published: January 14, 2025

Last Updated: April 10, 2025

🔗 References

https://github.com/MonetDB/MonetDB/issues/7433 Exploit,Issue Tracking

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-57624, you might also want to check these: