Privilege Escalation Vulnerability in PostgreSQL Packages
Summary
UBUNTU-CVE-2024-10978: Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. Affects postgresql-9.3 versions 9.3.1-1 – 9.3.9-0ubuntu0.14.04. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PostgreSQL is a powerful, open-source object-relational database system that uses and extends the SQL language. It is known for its reliability, robustness, and performance. The affected packages include various versions of PostgreSQL and its libraries, which are widely used in applications for data storage and management. This vulnerability allows less-privileged users to manipulate data inappropriately, posing a significant risk to data integrity and security.
Vulnerability Detail
The vulnerability arises from incorrect privilege assignment in PostgreSQL, which allows a less-privileged application user to view or change different rows than intended. An attacker must leverage features like SET ROLE or SET SESSION AUTHORIZATION to exploit this flaw. If an application query uses parameters from the attacker or conveys query results to them, it may inadvertently modify or return data as if the session had not utilized these privilege escalation features. This vulnerability affects versions prior to PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, it is advisable to restrict the use of SET ROLE and SET SESSION AUTHORIZATION in application queries until the packages are updated. Additionally, ensure that application queries do not expose sensitive data or allow untrusted input.
Conclusion
This report outlines a significant privilege escalation vulnerability in various PostgreSQL packages that could allow unauthorized data access or modification. It is crucial for users to update their PostgreSQL installations to the latest patched versions to mitigate this risk. Implementing workarounds can provide temporary relief until updates are applied.
See every vulnerability recorded for postgresql-9.3 →
FAQ
The CVSS score of this vulnerability is 4.2, indicating a medium severity level.
Versions prior to PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected by this vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, consider implementing workarounds such as restricting the use of SET ROLE and ensuring that application queries are secure.
For more information on PostgreSQL vulnerabilities, you can refer to the official PostgreSQL security page or the Ubuntu security notices.
Related vulnerabilities
Recent vulnerabilities recorded for postgresql-9.3.
