PostgreSQL Extension Script SQLi via @extowner@ @extschema@
CVE-2023-39417 Published on August 11, 2023

Postgresql: extension script @substitutions@ within quoting allow sql injection
IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct (dollar quoting, '', or ""). If an administrator has installed files of a vulnerable, trusted, non-bundled extension, an attacker with database-level CREATE privilege can execute arbitrary code as the bootstrap superuser.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

CVE-2023-39417 can be exploited with network access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Timeline

Reported to Red Hat.

Made public. 9 days later.

Weakness Type

What is a SQL Injection Vulnerability?

The software constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

CVE-2023-39417 has been classified to as a SQL Injection vulnerability or weakness.


Products Associated with CVE-2023-39417

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-39417 are published in these products:

Canonical Ubuntu Linux
 
PostgreSQL
 
Red Hat Enterprise Linux (RHEL)
 
Red Hat Software Collections
 
Debian Linux
 
Red Hat Advanced Cluster Security
 
Red Hat Rhel Tus
 
Red Hat Rhel Aus
 
Red Hat Rhel E4s
 
Red Hat Rhel Eus
 
Red Hat Rhel Software Collections
 

Affected Versions

Red Hat Advanced Cluster Security 4.2: Red Hat Advanced Cluster Security 4.2: Red Hat Advanced Cluster Security 4.2: Red Hat Advanced Cluster Security 4.2: Red Hat Advanced Cluster Security 4.2: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 8: Red Hat Enterprise Linux 8.2 Advanced Update Support: Red Hat Enterprise Linux 8.2 Telecommunications Update Service: Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: Red Hat Enterprise Linux 8.4 Telecommunications Update Service: Red Hat Enterprise Linux 8.4 Telecommunications Update Service: Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions: Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions: Red Hat Enterprise Linux 8.6 Extended Update Support: Red Hat Enterprise Linux 8.6 Extended Update Support: Red Hat Enterprise Linux 8.8 Extended Update Support: Red Hat Enterprise Linux 8.8 Extended Update Support: Red Hat Enterprise Linux 8.8 Extended Update Support: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9.0 Extended Update Support: Red Hat Enterprise Linux 9.2 Extended Update Support: Red Hat Enterprise Linux 9.2 Extended Update Support: Red Hat Software Collections for Red Hat Enterprise Linux 7: Red Hat Software Collections for Red Hat Enterprise Linux 7: Red Hat RHACS-3.74-RHEL-8: Red Hat RHACS-3.74-RHEL-8: Red Hat RHACS-3.74-RHEL-8: Red Hat RHACS-3.74-RHEL-8: Red Hat RHACS-3.74-RHEL-8: Red Hat RHACS-4.1-RHEL-8: Red Hat RHACS-4.1-RHEL-8: Red Hat RHACS-4.1-RHEL-8: Red Hat RHACS-4.1-RHEL-8: Red Hat RHACS-4.1-RHEL-8: Red Hat Enterprise Linux 6: Red Hat Enterprise Linux 7: Red Hat Enterprise Linux 8: Red Hat Software Collections:

Exploit Probability

EPSS
0.62%
Percentile
69.72%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.