PostgreSQL -- SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID

2024-11-14 · CVE-2024-10978 · VuXML entry

PostgreSQL project reports: Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. The problem arises when an application query uses parameters from the attacker or conveys query results to the attacker. If that query reacts to …

Affected versions

• postgresql17-server < 17.1
• postgresql16-server < 16.5
• postgresql15-server < 15.9
• postgresql14-server < 14.14
• postgresql13-server < 13.17
• postgresql12-server < 12.21

By system

0 still vulnerable, 8 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.