Vulnerability · Published Aug 24, 2020 · Assigned by redhat
CVE-2020-14349
High 7.1
In plain English
A high-severity security flaw in PostgreSQL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.1High
Exploit odds (30 days)2.2%top 17.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2760+1746ec94 | ALSA-2020:5620 |
| AlmaLinux:8 | postgres-decoderbufs | 0.10.0-2.module_el8.6.0+2758+4f4474df | ALSA-2020:5620 |
| Alpine:v3.20 | postgresql14 | 12.4-r0 | ALPINE-CVE-2020-14349 |
| Alpine:v3.20 | postgresql15 | 12.4-r0 | ALPINE-CVE-2020-14349 |
| Rocky Linux:8 | pgaudit | 0:1.4.0-4.module+el8.4.0+545+ca56da2e | RLSA-2020:5620 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.5.0+684+c3892ef9 | RLSA-2020:5620 |
| Rocky Linux:8 | postgres-decoderbufs | 0:0.10.0-2.module+el8.4.0+424+71d47d9a | RLSA-2020:5620 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | PostgreSQL | PostgreSQL versions before 12.4, before 11.9 and before 10.14 |
References
- openSUSE-SU-2020:1228 vendor-advisory, x_refsource_SUSE
- openSUSE-SU-2020:1244 vendor-advisory, x_refsource_SUSE
- openSUSE-SU-2020:1243 vendor-advisory, x_refsource_SUSE
- https://bugzilla.redhat.com/show_bug.cgi?id=1865744 x_refsource_MISC
- GLSA-202008-13 vendor-advisory, x_refsource_GENTOO
- USN-4472-1 vendor-advisory, x_refsource_UBUNTU
- openSUSE-SU-2020:1312 vendor-advisory, x_refsource_SUSE
- openSUSE-SU-2020:1326 vendor-advisory, x_refsource_SUSE
- https://security.netapp.com/advisory/ntap-20200918-0002/ x_refsource_CONFIRM