The time_t_to_dt component in Virtuoso OpenSource version 7.2.11 can be triggered by specially crafted SQL statements. When invoked, the component causes the database server to crash, resulting in a loss of availability for any services that rely on the database. The flaw is a logical error that does not directly expose data or modify contents, but its primary consequence is a denial of service.

openlink virtuoso-opensource (version 7.2.11). No other affected versions are mentioned in the advisory.

No CVSS score is provided and the vulnerability is not listed in CISA KEV, indicating no confirmed exploits at present. The EPSS score is unavailable, so the likelihood of exploitation cannot be quantified. The attack vector is inferred to be remote via the database interface, requiring the ability to submit malicious SQL statements. If authentication controls or network access are weak, the risk of exploitation increases. A successful exploitation would terminate the database process, causing a temporary or prolonged outage.