CVE-2024-27304
criticalpriority · track · 10EPSS 0.011 · 66 %ileexploit · PoCDEEURUUSEPSS · scored 2026-10-23
pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. The problem is resolved in v4.18.2 and v5.5.4. As a workaround, reject user input large enough to cause a single query or bind message to exceed 4 GB in size.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (1)
Public proof-of-concept and weaponised exploit code.
affected products (20)
Products and version ranges known to be affected.
advisories (5)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2024-0626Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Manipulation von DateienDeutsch2024-03-13csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren.
- GHSA-7jwh-3vrq-q3m8pgproto3 SQL Injection via Protocol Message Size Overflow2024-03-04ghsa · osvUS
### Impact SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. ### Patches The problem is resolved in v2.3.3 ### Workarounds Reject user input large enough to cause a single query or bind message to exceed 4 GB in size.
- GHSA-mrww-27vc-gghvpgx SQL Injection via Protocol Message Size Overflow2024-03-04ghsa · osvUS
### Impact SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. ### Patches The problem is resolved in v4.18.2 and v5.5.4. ### Workarounds Reject user input large enough to cause a single query or bind message to exceed 4 GB in size.
- CGA-vmcg-54pm-cp7r2024-06-06vendor · osvUS
- GO-2024-2606SQL injection in github.com/jackc/pgproto3 and github.com/jackc/pgx2024-03-14vendor · osvUS
An integer overflow in the calculated message size of a query or bind message could allow a single large message to be sent as multiple messages under the attacker's control. This could lead to SQL injection if an attacker can cause a single query or bind message to exceed 4 GB in size.
also known as (8)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (22)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2024-27304cnnvd
- https://cxsecurity.com/cveshow/CVE-2024-27304/cnnvd
- https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007cnnvd
- https://github.com/jackc/pgproto3/security/advisories/GHSA-7jwh-3vrq-q3m8cnnvd
- https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4cnnvd
- https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8cnnvd
- https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81dfcnnvd
- https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghvcnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan