GHSA-7jwh-3vrq-q3m8

Source

https://github.com/advisories/GHSA-7jwh-3vrq-q3m8

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/03/GHSA-7jwh-3vrq-q3m8/GHSA-7jwh-3vrq-q3m8.json

Aliases

• CVE-2024-27304
• GHSA-mrww-27vc-gghv
• GO-2024-2606

Published

2024-03-04T20:45:25Z

Modified

2024-03-14T21:46:07Z

Summary

pgproto3 SQL Injection via Protocol Message Size Overflow

Details

Impact

SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control.

Patches

The problem is resolved in v2.3.3

Workarounds

Reject user input large enough to cause a single query or bind message to exceed 4 GB in size.

References

• https://github.com/jackc/pgproto3/security/advisories/GHSA-7jwh-3vrq-q3m8
• https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv
• https://nvd.nist.gov/vuln/detail/CVE-2024-27304
• https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007
• https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4
• https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8
• https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df
• https://github.com/jackc/pgproto3