REDHAT-BUG-2326251
First published: Thu Nov 14 2024(Updated: )
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. The problem arises when an application query uses parameters from the attacker or conveys query results to the attacker. If that query reacts to current_setting('role') or the current user ID, it may modify or return data as though the session had not used SET ROLE or SET SESSION AUTHORIZATION. The attacker does not control which incorrect user ID applies. Query text from less-privileged sources is not a concern here, because SET ROLE and SET SESSION AUTHORIZATION are not sandboxes for unvetted queries. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PostgreSQL Common | <17.1<16.5<15.9<14.14<13.17<12.21 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2024:10785
- https://access.redhat.com/errata/RHSA-2024:10788
- https://access.redhat.com/errata/RHSA-2024:10787
- https://access.redhat.com/errata/RHSA-2024:10791
- https://access.redhat.com/errata/RHSA-2024:10830
- https://access.redhat.com/errata/RHSA-2024:10832
- https://access.redhat.com/errata/RHSA-2024:10831
- https://bugzilla.redhat.com/show_bug.cgi?id=2326251
Frequently Asked Questions
What is the severity of REDHAT-BUG-2326251?
The severity of REDHAT-BUG-2326251 is classified as a privilege escalation vulnerability that can lead to unauthorized access to sensitive data.
How do I fix REDHAT-BUG-2326251?
To fix REDHAT-BUG-2326251, you should upgrade PostgreSQL to the latest versions beyond those listed as affected.
What versions of PostgreSQL are affected by REDHAT-BUG-2326251?
PostgreSQL versions up to 17.1 and down to 12.21 are affected by REDHAT-BUG-2326251.
What kind of attack is possible due to REDHAT-BUG-2326251?
An attacker can exploit REDHAT-BUG-2326251 to manipulate or view data in the database by using improper privilege settings.
Does REDHAT-BUG-2326251 require specific application behavior to be exploited?
Yes, exploitation of REDHAT-BUG-2326251 requires the application to utilize SET ROLE, SET SESSION AUTHORIZATION, or a similar feature.
- agent/severity
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/references
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-10978
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/postgresql
- canonical/postgresql common