PT-2023-2939 · Aiven · Aiven-Extras
Svenklemm
·
Published
2023-05-12
·
Updated
2024-02-01
·
CVE-2023-32305
CVSS v3.1
8.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
aiven-extras versions prior to 1.1.9
Description
The issue is related to a privilege escalation vulnerability in the aiven-extras PostgreSQL extension. It allows a low-privileged user to elevate to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages missing schema qualifiers on privileged functions called by the aiven-extras extension, enabling a low-privileged user to create objects that collide with existing function names, which will then be executed instead. This could allow a low-privileged user to acquire
superuser privileges, granting full, unrestricted access to all data and database functions, and potentially leading to arbitrary code execution or data access on the underlying host as the postgres user.Recommendations
For versions prior to 1.1.9, update to version 1.1.9 or later to patch the vulnerability. As a temporary workaround, consider restricting access to the aiven-extras extension to minimize the risk of exploitation. Additionally, monitor database activity for suspicious object creation or function execution to detect potential exploitation attempts.
Exploit
Fix
Prototype Pollution
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Aiven-Extras