Базы данных: уязвимости стека · Страница 23

Lua library commands may lead to stack overflow and RCE in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• Обновитесь до 1.0.2-5ubuntu0.20.04.1~esm2
• Обновитесь до 1.0.2-5ubuntu0.22.04.1~esm2
• Обновитесь до 2:3.0.6-1ubuntu0.4+esm5
• Обновитесь до 5:4.0.9-1ubuntu0.2+esm7
• Обновитесь до 5:7.0.15-1ubuntu0.24.04.4
• Обновитесь до 5:7.0.15-1~deb12u2
• Обновитесь до 5:7.0.15-2
• Обновитесь до 7.3.1+ds-1
• Обновитесь до 8.0.1+dfsg1-1

Denial-of-service due to unbounded pattern matching in Redis

Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may result in unbounded recursion, leading to stack overflow and process crash. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• Обновитесь до 2:3.0.6-1ubuntu0.4+esm3
• Обновитесь до 5:4.0.9-1ubuntu0.2+esm5
• Обновитесь до 5:5.0.7-2ubuntu0.1+esm3
• Обновитесь до 5:6.0.16-1ubuntu1+esm2
• Обновитесь до 5:7.0.15-1ubuntu0.24.04.1
• Обновитесь до 5:7.0.15-1~deb12u2
• Обновитесь до 5:7.0.15-2
• Обновитесь до 7.3.1+ds-1
• Обновитесь до 8.0.1+dfsg1-1

Denial-of-service due to malformed ACL selectors in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• Обновитесь до 5:7.0.15-1~deb12u2
• Обновитесь до 5:7.0.15-2
• Обновитесь до 7.3.1+ds-1
• Обновитесь до 8.0.1+dfsg1-1

PostgreSQL relation replacement during pg_dump executes arbitrary SQL

Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.

• Обновитесь до 10.23-0ubuntu0.18.04.2+esm2
• Обновитесь до 12.20
• Обновитесь до 12.20-0ubuntu0.20.04.1
• Обновитесь до 13.16
• Обновитесь до 14.13
• Обновитесь до 14.13-0ubuntu0.22.04.1
• Обновитесь до 15.8
• Обновитесь до 15.8-0+deb12u1
• Обновитесь до 16.4
• Обновитесь до 16.4-0ubuntu0.24.04.1
• Обновитесь до 9.3.24-0ubuntu0.14.04+esm1
• Обновитесь до 9.5.25-0ubuntu0.16.04.1+esm8

Specially crafted request could caused undefined behaviour which may lead to Remote Code Execution.

It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time of execution, and no known remote code execution (RCE) code has been produced or exploited.  Fixes have been merged to all currently supported version of ClickHouse. If you are maintaining your own forked version of ClickHouse or using an older version and cannot upgrade, the fix for this vulnerability can be found in this commit  https://github.com/C

• Обновитесь до v23.8.15.35-lts
• Обновитесь до v24.3.4.147-lts
• Обновитесь до v24.4.2.141-stable
• Обновитесь до v24.5.1.1763
• Обновитесь до v24.6.1.4423-stable

CVE-2024-21185

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.38, 8.4.1 and 9.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.39-0ubuntu0.20.04.1
• Обновитесь до 8.0.39-0ubuntu0.22.04.1
• Обновитесь до 8.0.39-0ubuntu0.24.04.1

CVE-2024-21179

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.39-0ubuntu0.20.04.1
• Обновитесь до 8.0.39-0ubuntu0.22.04.1
• Обновитесь до 8.0.39-0ubuntu0.24.04.1

CVE-2024-21177

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.39-0ubuntu0.20.04.1
• Обновитесь до 8.0.39-0ubuntu0.22.04.1
• Обновитесь до 8.0.39-0ubuntu0.24.04.1

CVE-2024-21176

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.4.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVE-2024-21173

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.39-0ubuntu0.20.04.1
• Обновитесь до 8.0.39-0ubuntu0.22.04.1
• Обновитесь до 8.0.39-0ubuntu0.24.04.1

CVE-2024-21171

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.39-0ubuntu0.20.04.1
• Обновитесь до 8.0.39-0ubuntu0.22.04.1
• Обновитесь до 8.0.39-0ubuntu0.24.04.1

CVE-2024-21166

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3

• Обновитесь до 8.0.37-0ubuntu0.20.04.3
• Обновитесь до 8.0.37-0ubuntu0.22.04.3
• Обновитесь до 8.0.37-0ubuntu0.24.04.1

CVE-2024-21165

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.37 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.39-0ubuntu0.20.04.1
• Обновитесь до 8.0.39-0ubuntu0.22.04.1
• Обновитесь до 8.0.39-0ubuntu0.24.04.1

CVE-2024-21163

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N

• Обновитесь до 8.0.39-0ubuntu0.20.04.1
• Обновитесь до 8.0.39-0ubuntu0.22.04.1
• Обновитесь до 8.0.39-0ubuntu0.24.04.1

CVE-2024-21162

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.39-0ubuntu0.20.04.1
• Обновитесь до 8.0.39-0ubuntu0.22.04.1
• Обновитесь до 8.0.39-0ubuntu0.24.04.1

CVE-2024-21160

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.37-0ubuntu0.20.04.3
• Обновитесь до 8.0.37-0ubuntu0.22.04.3
• Обновитесь до 8.0.37-0ubuntu0.24.04.1

CVE-2024-21159

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.37-0ubuntu0.20.04.3
• Обновитесь до 8.0.37-0ubuntu0.22.04.3
• Обновитесь до 8.0.37-0ubuntu0.24.04.1

CVE-2024-21157

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.37-0ubuntu0.20.04.3
• Обновитесь до 8.0.37-0ubuntu0.22.04.3
• Обновитесь до 8.0.37-0ubuntu0.24.04.1

CVE-2024-21142

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.39-0ubuntu0.20.04.1
• Обновитесь до 8.0.39-0ubuntu0.22.04.1
• Обновитесь до 8.0.39-0ubuntu0.24.04.1

CVE-2024-21137

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Обновитесь до 8.0.36-0ubuntu0.20.04.1
• Обновитесь до 8.0.36-0ubuntu0.22.04.1
• Обновитесь до 8.0.36-1