8.8
HIGH
CVE-2024-7348
PostgreSQL SQL Injection Vulnerability
Description

Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.

INFO

Published Date :

Aug. 8, 2024, 1:15 p.m.

Last Modified :

Aug. 12, 2024, 3:54 p.m.

Source :

f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

2.8
Affected Products

The following products are affected by CVE-2024-7348 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Postgresql postgresql
: Total Affected Vendor : 1 | Products : 1
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-7348.

URL Resource
https://www.postgresql.org/support/security/CVE-2024-7348/ Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-7348 vulnerability anywhere in the article.

  • Cybersecurity News
PostgreSQL Releases Security Update Addressing Multiple Vulnerabilities

The PostgreSQL Global Development Group has issued an important update addressing four security vulnerabilities across all supported versions of the popular open-source database system. This includes ... Read more

Published Date: Nov 18, 2024 (5 days, 8 hours ago)
CVE-2024-10979 CVE-2024-10978 CVE-2024-10977 CVE-2024-10976 CVE-2024-51748 CVE-2024-51747 CVE-2024-51482 CVE-2024-8312 CVE-2024-6826 CVE-2024-45844 ...+2 more CVE
  • Cybersecurity News
CVE-2024-9014 (CVSS 9.9): pgAdmin’s Critical Vulnerability Puts User Data at Risk

pgAdmin, the leading open-source management tool for PostgreSQL databases, has released an urgent security update to address a critical vulnerability affecting versions 8.11 and earlier. This flaw, id ... Read more

Published Date: Sep 25, 2024 (1 month, 4 weeks ago)
CVE-2024-9014 CVE-2024-8696 CVE-2024-8695 CVE-2024-8190 CVE-2024-38063 CVE-2024-7348 CVE-2024-36401 CVE-2024-5274 CVE-2024-4947 CVE-2024-4216 ...+2 more CVE
  • Cybersecurity News
CVE-2024-43399: Critical Zip Slip Vulnerability Discovered in Mobile Security Framework (MobSF)

A serious security flaw has been uncovered in Mobile Security Framework (MobSF), a widely-used open-source tool for mobile app security analysis. The vulnerability, identified as CVE-2024-43399 (CVSS ... Read more

Published Date: Aug 26, 2024 (2 months, 4 weeks ago)
CVE-2024-43399 CVE-2024-38213 CVE-2024-7348 CVE-2024-6576 CVE-2024-29190 CVE-2024-21633 CVE-2023-36735
  • Cybersecurity News
New PostgreSQL Threat: PG_MEM Malware Strikes Databases

Attack flow of PG_MEM | Image: Aqua NautilusA new and insidious threat has emerged, targeting the widely used PostgreSQL database management system. Aqua Nautilus researchers have identified a novel m ... Read more

Published Date: Aug 24, 2024 (2 months, 4 weeks ago)
CVE-2024-21689 CVE-2024-36877 CVE-2024-7348 CVE-2024-5290 CVE-2024-7120 CVE-2023-5869
  • TheCyberThrone
SolarWinds fixes a critical vulnerability in Help Desk Product -CVE-2024-28986

SolarWinds has released patches for a critical vulnerability in its Web Help Desk software.The vulnerability, tracked as CVE-2024-28986, with a CVSS score of 9.8, allows for Java Deserialization Remot ... Read more

Published Date: Aug 14, 2024 (3 months, 1 week ago)
CVE-2024-28986 CVE-2024-6768 CVE-2024-7348 CVE-2023-35082
  • TheCyberThrone
SAP Patch Tuesday – August 2024

SAP has released its monthly security patches for August 2024, addressing vulnerabilities across its product portfolio. The update includes fixes for 17 new security notes and 8 updates to previously ... Read more

Published Date: Aug 14, 2024 (3 months, 1 week ago)
CVE-2024-42373 CVE-2024-41734 CVE-2024-39591 CVE-2024-42376 CVE-2024-42375 CVE-2024-42374 CVE-2024-41737 CVE-2024-41736 CVE-2024-41735 CVE-2024-41733 ...+17 more CVE
  • TheCyberThrone
Ivanti fixes Vulnerabilities in its ITSM Product

Ivanti has released patches for two vulnerabilities in its Neurons for IT Service Management (ITSM) platform, with potential risks ranging from unauthorized information disclosure to full system compr ... Read more

Published Date: Aug 14, 2024 (3 months, 1 week ago)
CVE-2024-7570 CVE-2024-7569 CVE-2024-6768 CVE-2024-7589 CVE-2024-7348 CVE-2023-35082
  • TheCyberThrone
CISA adds Microsoft Patch Tuesday bugs to its Catalog

The US CISA adds 6 Microsoft vulnerabilities to its Known Exploited Vulnerabilities Catalog that is released as part of patch Tuesday, August 2024.CVE-2024-38189 – Microsoft Project Remote Code Execut ... Read more

Published Date: Aug 14, 2024 (3 months, 1 week ago)
CVE-2024-38213 CVE-2024-38193 CVE-2024-38189 CVE-2024-38178 CVE-2024-38107 CVE-2024-38106 CVE-2024-6768 CVE-2024-7589 CVE-2024-7348
  • TheCyberThrone
Microsoft Patch Tuesday-August 2024

Microsoft patched 90 CVEs in its August 2024 Patch Tuesday release, with seven rated critical, 82 rated as important, and one rated as moderate.This includes updates for vulnerabilities in Microsoft O ... Read more

Published Date: Aug 14, 2024 (3 months, 1 week ago)
CVE-2024-38163 CVE-2024-38223 CVE-2024-38215 CVE-2024-38214 CVE-2024-38213 CVE-2024-38211 CVE-2024-38201 CVE-2024-38199 CVE-2024-38198 CVE-2024-38197 ...+83 more CVE
  • TheCyberThrone
PostgreSQL TOCTOU Vulnerability CVE-2024-7348

PostgreSQL has released a security advisory, related to a vulnerability that exposes users to the risk of arbitrary SQL execution during pg_dump operations, potentially allowing attackers to execute h ... Read more

Published Date: Aug 13, 2024 (3 months, 1 week ago)
CVE-2024-6768 CVE-2024-7589 CVE-2024-7348
  • Cybersecurity News
BYOVDLL: New Exploit Bypasses Microsoft’s LSASS Defenses

In July 2022, Microsoft made modifications to its Protected Process Light (PPL) system aimed at mitigating a vulnerability that allowed bypassing the protection of LSASS, a critical process responsibl ... Read more

Published Date: Aug 13, 2024 (3 months, 1 week ago)
CVE-2024-22116 CVE-2024-7348 CVE-2024-6576 CVE-2024-41827
  • Cybersecurity News
Security Flaw in PostgreSQL: CVE-2024-7348 Allows Arbitrary SQL Execution

The PostgreSQL project has issued a security advisory, warning users of a serious vulnerability (CVE-2024-7348). The flaw, which carries a CVSS score of 8.8, exposes users to the risk of arbitrary SQL ... Read more

Published Date: Aug 13, 2024 (3 months, 1 week ago)
CVE-2024-7348 CVE-2024-6576 CVE-2024-41827 CVE-2024-1597 CVE-2023-5869

The following table lists the changes that have been made to the CVE-2024-7348 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • Initial Analysis by [email protected]

    Aug. 12, 2024

    Action Type Old Value New Value
    Added CVSS V3.1 NIST AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://www.postgresql.org/support/security/CVE-2024-7348/ No Types Assigned https://www.postgresql.org/support/security/CVE-2024-7348/ Vendor Advisory
    Added CWE NIST CWE-367
    Added CPE Configuration OR *cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* versions from (including) 12.0 up to (excluding) 12.20 *cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* versions from (including) 13.0 up to (excluding) 13.16 *cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* versions from (including) 14.0 up to (excluding) 14.13 *cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* versions from (including) 15.0 up to (excluding) 15.8 *cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* versions from (including) 16.0 up to (excluding) 16.4
  • CVE Received by f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

    Aug. 08, 2024

    Action Type Old Value New Value
    Added Description Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.
    Added Reference PostgreSQL https://www.postgresql.org/support/security/CVE-2024-7348/ [No types assigned]
    Added CWE PostgreSQL CWE-367
    Added CVSS V3.1 PostgreSQL AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-7348 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-7348 weaknesses.

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: