GHSA-mrww-27vc-gghv

Source

https://github.com/advisories/GHSA-mrww-27vc-gghv

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/03/GHSA-mrww-27vc-gghv/GHSA-mrww-27vc-gghv.json

Aliases

• CVE-2024-27304
• GHSA-7jwh-3vrq-q3m8
• GO-2024-2606

Published

2024-03-04T20:43:24Z

Modified

2024-03-14T21:45:18Z

Summary

pgx SQL Injection via Protocol Message Size Overflow

Details

Impact

SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control.

Patches

The problem is resolved in v4.18.2 and v5.5.4.

Workarounds

Reject user input large enough to cause a single query or bind message to exceed 4 GB in size.

References

• https://github.com/jackc/pgproto3/security/advisories/GHSA-7jwh-3vrq-q3m8
• https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv
• https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007
• https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4
• https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8
• https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df
• https://github.com/jackc/pgx