CRITICAL9.8
GHSA-7jwh-3vrq-q3m8
pgproto3 SQL Injection via Protocol Message Size Overflow
Quick fix
GHSA-7jwh-3vrq-q3m8 — github.com/jackc/pgproto3: upgrade to the fixed version with the command below.
go get github.com/jackc/pgproto3@v2.3.3Details
### Impact
SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control.
### Patches
The problem is resolved in v2.3.3
### Workarounds
Reject user input large enough to cause a single query or bind message to exceed 4 GB in size.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/jackc/pgproto3
Introduced in:
0Fixed in: 2.3.3Fix
go get github.com/jackc/pgproto3@v2.3.3Go/github.com/jackc/pgproto3/v2
Introduced in:
0Fixed in: 2.3.3Fix
go get github.com/jackc/pgproto3/v2@v2.3.3References
- https://github.com/jackc/pgproto3/security/advisories/GHSA-7jwh-3vrq-q3m8[WEB]
- https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2024-27304[ADVISORY]
- https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007[WEB]
- https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4[WEB]
- https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8[WEB]
- https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df[WEB]
- https://github.com/jackc/pgproto3[PACKAGE]