PT-2023-14504 · Unknown+5 · Active Record+5

Jeremy Evans · Publicado 2023-01-18 · Atualizado 2025-11-25 · CVE-2022-44566

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions ActiveRecord versions prior to 6.1.7.1 ActiveRecord versions prior to 7.0.4.1

Description A denial of service issue is present in ActiveRecord's PostgreSQL adapter. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan, potentially leading to a denial of service. The issue is related to insufficient input validation in the PostgreSQL adapter.

Recommendations For versions prior to 6.1.7.1, update to version 6.1.7.1 or apply the patch 6-1-Added-integer-width-check-to-PostgreSQL-Quoting.patch. For versions prior to 7.0.4.1, update to version 7.0.4.1 or apply the patch 7-0-Added-integer-width-check-to-PostgreSQL-Quoting.patch. As a temporary workaround, ensure that user-supplied input provided to ActiveRecord clauses does not contain integers wider than a signed 64bit representation or floats.

Exploit

Correção

DoS

RCE

Resource Exhaustion

Enumeração de Fraquezas

CWE-20

CWE-400

Identificadores relacionados

ALSA-2025_16880

ALT-PU-2023-1336

ALT-PU-2023-4268

ALT-PU-2024-7814

BDU:2025-01400

CVE-2022-44566

DLA-4383-1

GHSA-579W-22J4-4749

OESA-2023-1132

OESA-2023-1133

OPENSUSE-SU-2024:12766-1

OPENSUSE-SU-2024:14069-1

OPENSUSE-SU-2025:15112-1

RHSA-2023:6818

RLSA-2023:6818

SUSE-SU-2023:0492-1

SUSE-SU-2023:0518-1

SUSE-SU-2023:0587-1

SUSE-SU-2023_0492-1

Produtos afetados

Alt Linux

Active Record

Debian

Red Os

Rocky Linux

Suse

Referências · 46

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2022-44566.yml · Exploit
• 🔥 https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html · Exploit
• https://github.com/rails/rails · Nota
• https://github.com/rails/rails/releases/tag/v6.1.7.1 · Nota
• https://github.com/rails/rails/commit/414eb337d142a9c61d7723ceb9b7c1ab30dff3ed · Nota
• https://github.com/rails/rails/commit/82bcdc011e2ff674e7dd8fd8cee3a831c908d29b · Nota
• https://github.com/rails/rails/commit/4f44aa9d514e701ada92b5cf08beccf566eeaebf · Nota
• https://github.com/rails/rails/releases/tag/v7.0.4.1 · Nota
• https://makandracards.com/railslts/508019-rails-5-2-lts-changelog#section-jan-20th-2023-rails-version-5-2-8-15 · Nota
• https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119 · Aviso do Fabricante
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-rubygem-activerecord-cve-2022-44566-cve-2023-22794 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:12766-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-44566 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2022-44566 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2023:0587-1 · Aviso do Fabricante