CVE-2024-57641

What it actually does

The sqlexp component in the affected software allows crafted SQL statements to trigger a denial of service condition, causing the server process to crash or become unresponsive.

Why it matters to the business

Results in unplanned downtime for database services, disrupting operations on affected Red Hat virtualization environments and requiring emergency remediation to restore availability.

How an attack unfolds

An attacker with network or local access to the database interface submits specially crafted SQL statements targeting the sqlexp component, causing resource exhaustion or crash without authentication in some configurations.

How to fix it

Apply the listed fixed package versions immediately: update kmod-kvm, kvm, kvm-debuginfo, kvm-qemu-img, and kvm-tools to 0:83-105.el5_4.7 on both client and server Red Hat rhel_virtualization:5 systems.

How to confirm the fix worked

Verify package versions match the fixed releases using rpm -q on each listed kvm component and confirm the service starts without errors after upgrade.

Typical attack path

1. Locate an exposed instance running the vulnerable version
2. Connect to the SQL interface
3. Submit crafted SQL payload via sqlexp
4. Trigger repeated requests to sustain the DoS condition

How to detect it

Review database logs for repeated malformed SQL errors or sudden server crashes; check process termination events around the sqlexp component.

What your security team should do

• Prioritize patching all listed kvm packages on Red Hat systems within the next maintenance window due to the published date and available fixes
• Monitor EPSS trend for any increase indicating rising exploit interest
• Restrict SQL interface access to trusted sources until upgrades are complete