GHSA-mrww-27vc-gghv
pgx SQL Injection via Protocol Message Size Overflow
At a glance
- Published
- Updated
- CVE
- CVE-2024-27304
- Aliases
- GHSA-7jwh-3vrq-q3m8, GO-2024-2606
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Description
### Impact SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. ### Patches The problem is resolved in v4.18.2 and v5.5.4. ### Workarounds Reject user input large enough to cause a single query or bind message to exceed 4 GB in size.
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/jackc/pgx | introduced 0, fixed 4.18.2 |
| Go · github.com/jackc/pgx | introduced 5.0.0, fixed 5.5.4 |
| Go · github.com/jackc/pgx/v4 | introduced 0, fixed 4.18.2 |
| Go · github.com/jackc/pgx/v5 | introduced 5.0.0, fixed 5.5.4 |
References
- https://github.com/jackc/pgproto3/security/advisories/GHSA-7jwh-3vrq-q3m8 WEB
- https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv WEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-27304 ADVISORY
- https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007 WEB
- https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4 WEB
- https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8 WEB
- https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df WEB
- https://github.com/jackc/pgx PACKAGE
- https://www.youtube.com/watch?v=Tfg1B8u1yvE WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |