pgx SQL Injection via Protocol Message Size Overflow
### Impact SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. ### Patches The problem is resolved in v4.18.2 and v5.5.4. ### Workarounds Reject user input large enough to cause a single query or bind message to exceed 4 GB in size.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-27304US | — | Exploit | ||
pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the ca… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007WEB
- https://github.com/jackc/pgproto3/security/advisories/GHSA-7jwh-3vrq-q3m8WEB
- https://github.com/jackc/pgxPACKAGE
- https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4WEB
- https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8WEB
- https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81dfWEB
- https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghvWEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-27304ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan