PT-2023-7471 · Unknown · Greenplum Database

Published 2023-05-15 · Updated 2023-05-25 · CVE-2023-31131

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Greenplum Database versions prior to 6.22.3

Description The issue is related to the Greenplum Database using unsafe methods to extract tar files within GPPKGs, leading to path traversal and arbitrary file writes. An attacker can exploit this to overwrite data or system files, potentially causing a system crash or malfunction. Any files accessible to the running process are at risk.

Recommendations For Greenplum Database versions prior to 6.22.3, upgrade to Greenplum Database version 6.23.2 or higher. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation. Note that there are no known workarounds for this issue other than upgrading to a patched version.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2023-08515

CVE-2023-31131

GHSA-HGM9-2Q42-C7F3

Affected Products

Greenplum Database

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/31xxx/CVE-2023-31131.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-31131 · Security Note
• ❌ https://github.com/greenplum-db/gpdb/security/advisories/GHSA-hgm9-2q42-c7f3 · Vendor Advisory, Deleted
• https://osv.dev/vulnerability/CVE-2023-31131 · Vendor Advisory
• ❌ https://github.com/greenplum-db/gpdb/commit/1ec4affbba7c9745f64edbd80a6680ad29b09471 · Patch, Deleted
• https://bdu.fstec.ru/vul/2023-08515 · Security Note
• https://t.me/cibsecurity/64181 · Telegram Post
• https://vuldb.com/?id.229091 · Note
• https://t.me/cvenotify/50508 · Telegram Post