Skip to content
Heist/ feed
HighFix available

Postgresql: extension script @substitutions@ within quoting allow sql injection

Type: advisorySource: OSV1 source record

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.

Announced Group revision 1
Original source ↗

BIT-postgresql-2023-39417

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:BIT-postgresql-2023-39417

postgresql

Source reference: /affected/0/package/name

Affected versions
Not stated in this record
Fixed versions
11.21.0

Source reference: /affected/0/ranges

12.16.0

Source reference: /affected/0/ranges

13.12.0

Source reference: /affected/0/ranges

14.9.0

Source reference: /affected/0/ranges

15.4.0

Source reference: /affected/0/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "SEMVER",
        "events": [
          {
            "introduced": "11.0.0"
          },
          {
            "fixed": "11.21.0"
          },
          {
            "introduced": "12.0.0"
          },
          {
            "fixed": "12.16.0"
          },
          {
            "introduced": "13.0.0"
          },
          {
            "fixed": "13.12.0"
          },
          {
            "introduced": "14.0.0"
          },
          {
            "fixed": "14.9.0"
          },
          {
            "introduced": "15.0.0"
          },
          {
            "fixed": "15.4.0"
          }
        ]
      }
    ],
    "package": {
      "name": "postgresql",
      "purl": "pkg:bitnami/postgresql",
      "ecosystem": "Bitnami"
    },
    "severity": [
      {
        "type": "CVSS_V3",
        "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
      }
    ],
    "database_specific": {
      "source": "https://github.com/bitnami/vulndb/tree/main/data/postgresql/BIT-postgresql-2023-39417.json"
    }
  }
]
Related CVEs
CVE-2023-39417

Source reference: /aliases

Publisher severity

high

Source reference: /database_specific/severity

Linked CVE context

These ratings describe the referenced vulnerabilities and products. They are not a severity rating for every application using this dependency.

CVE-2023-39417 · High

Red Hat Advanced Cluster Security 4.2, Red Hat Advanced Cluster Security 4.2, Red Hat Advanced Cluster Security 4.2, Red Hat Advanced Cluster Security 4.2, Red Hat Advanced Cluster Security 4.2, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Software Collections for Red Hat Enterprise Linux 7, Red Hat Software Collections for Red Hat Enterprise Linux 7, RHACS-3.74-RHEL-8, RHACS-3.74-RHEL-8, RHACS-3.74-RHEL-8, RHACS-3.74-RHEL-8, RHACS-3.74-RHEL-8, RHACS-4.1-RHEL-8, RHACS-4.1-RHEL-8, RHACS-4.1-RHEL-8, RHACS-4.1-RHEL-8, RHACS-4.1-RHEL-8, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Software Collections

Event
#59542 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement

Revision history

  1. BIT-postgresql-2023-39417 · Revision 1Source updated