PT-2024-20456 · Cratedb · Cratedb

Tu0Laj1 · Published 2024-01-30 · Updated 2024-02-05 · CVE-2024-24565

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions CrateDB versions prior to 5.3.9 CrateDB versions prior to 5.4.8 CrateDB versions prior to 5.5.4 CrateDB versions prior to 5.6.1

Description The CrateDB database has a flaw in its COPY FROM function, which allows authenticated attackers to import arbitrary file content into database tables, resulting in information leakage. This issue can be exploited by using the COPY FROM function to read sensitive files, such as /etc/passwd or /crate/config/crate.yml, and then selecting the contents of the imported table. The vulnerability affects all current versions of the CrateDB database and can impact CrateDB Cloud Clusters.

Recommendations For versions prior to 5.3.9, update to version 5.3.9 or later. For versions prior to 5.4.8, update to version 5.4.8 or later. For versions prior to 5.5.4, update to version 5.5.4 or later. For versions prior to 5.6.1, update to version 5.6.1 or later. As a temporary workaround, consider restricting access to the COPY FROM function to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-24565

GHSA-475G-VJ6C-XF96

Affected Products

Cratedb

References · 14

• 🔥 https://github.com/crate/crate/security/advisories/GHSA-475g-vj6c-xf96 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/24xxx/CVE-2024-24565.json · Exploit
• https://github.com/crate/crate/commit/4e857d675683095945dd524d6ba03e692c70ecd6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-24565 · Security Note
• https://osv.dev/vulnerability/GHSA-475g-vj6c-xf96 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-24565 · Vendor Advisory
• https://github.com/crate/crate/commit/32d0fc2ebb834ea324eb7ab5d01320a67bc5c3c7 · Note
• https://github.com/crate/crate/commit/b75aeeabf90f51bd96ddb499903928fd10185207 · Note
• https://github.com/crate/crate/commit/c4c97d5a1c52cc2250ea42d062a3d37550c19dd5 · Note
• https://github.com/crate/crate/commit/c5034323f1b56ca5d04b8ef4c6029eb63a5ba172 · Note
• https://github.com/crate/crate · Note
• https://twitter.com/CVEnew/status/1752379858523480180 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1752414535720239565 · Twitter Post
• https://t.me/cvenotify/70107 · Telegram Post