SQL injection in github.com/jackc/pgproto3 and github.com/jackc/pgx
An integer overflow in the calculated message size of a query or bind message could allow a single large message to be sent as multiple messages under the attacker's control. This could lead to SQL injection if an attacker can cause a single query or bind message to exceed 4 GB in size.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-27304US | — | Exploit | ||
pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the ca… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007FIX
- https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4FIX
- https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8FIX
- https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81dfFIX
- https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghvADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan