~ / search / GHSA-mrww-27vc-gghv

GHSA-mrww-27vc-gghv

pgx SQL Injection via Protocol Message Size Overflow

Source: GitHub Advisory Database (reviewed) High CVE-2024-27304

Packages

EcosystemPackageAffectedFixed in
Go github.com/jackc/pgx < 4.18.2 4.18.2
Go github.com/jackc/pgx >= 5.0.0, < 5.5.4 5.5.4
Go github.com/jackc/pgx/v4 < 4.18.2 4.18.2
Go github.com/jackc/pgx/v5 >= 5.0.0, < 5.5.4 5.5.4

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. ### Patches The problem is resolved in v4.18.2 and v5.5.4. ### Workarounds Reject user input large enough to cause a single query or bind message to exceed 4 GB in size.

References

External links from the advisory. They lead to third-party sites.