Anolis OS update for postgresql:13 module



Risk High
Patch available YES
Number of vulnerabilities 5
CVE-ID CVE-2024-10976
CVE-2023-2455
CVE-2016-2193
CVE-2024-10978
CVE-2024-10979
CWE-ID CWE-269
CWE-254
CWE-266
CWE-285
Exploitation vector Network
Public exploit N/A
Vulnerable software
 Anolis OS
Operating systems & Components / Operating system

postgresql-test-rpm-macros
Operating systems & Components / Operating system package or component

postgresql-upgrade-devel
Operating systems & Components / Operating system package or component

postgresql-upgrade
Operating systems & Components / Operating system package or component

postgresql-test
Operating systems & Components / Operating system package or component

postgresql-static
Operating systems & Components / Operating system package or component

postgresql-server-devel
Operating systems & Components / Operating system package or component

postgresql-server
Operating systems & Components / Operating system package or component

postgresql-pltcl
Operating systems & Components / Operating system package or component

postgresql-plpython3
Operating systems & Components / Operating system package or component

postgresql-plperl
Operating systems & Components / Operating system package or component

postgresql-docs
Operating systems & Components / Operating system package or component

postgresql-contrib
Operating systems & Components / Operating system package or component

postgresql
Operating systems & Components / Operating system package or component

pg_repack
Operating systems & Components / Operating system package or component

pgaudit
Operating systems & Components / Operating system package or component

postgres-decoderbufs
Operating systems & Components / Operating system package or component

Vendor OpenAnolis

Security Bulletin

This security bulletin contains information about 5 vulnerabilities.

1) Improper privilege management

EUVDB-ID: #VU100511

Risk: Medium

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-10976

CWE-ID: CWE-269 - Improper Privilege Management

Exploit availability: No

Description

The vulnerability allows a remote user to bypass implemented security restrictions.

The vulnerability exists due to improper privilege management in cases where a subquery, WITH query, security invoker view, or SQL-language function references a table with a row-level security policy. A remote user can bypass implemented security restrictions and gain unauthorized access to the database in cases where role-specific policies are used and a given query is planned under one role and then executed under other roles.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

postgresql-test-rpm-macros: before 13.18-1.0.1

postgresql-upgrade-devel: before 13.18-1.0.1

postgresql-upgrade: before 13.18-1.0.1

postgresql-test: before 13.18-1.0.1

postgresql-static: before 13.18-1.0.1

postgresql-server-devel: before 13.18-1.0.1

postgresql-server: before 13.18-1.0.1

postgresql-pltcl: before 13.18-1.0.1

postgresql-plpython3: before 13.18-1.0.1

postgresql-plperl: before 13.18-1.0.1

postgresql-docs: before 13.18-1.0.1

postgresql-contrib: before 13.18-1.0.1

postgresql: before 13.18-1.0.1

pg_repack: before 1.4.6-3

pgaudit: before 1.5.0-1

postgres-decoderbufs: before 0.10.0-2

CPE2.3 External links

https://anas.openanolis.cn/errata/detail/ANSA-2024:1167


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Security features bypass

EUVDB-ID: #VU76042

Risk: Low

CVSSv4.0: 0.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-2455

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows a remote user to bypass implemented security restrictions.

The vulnerability exists due to incomplete fix for #VU40402 (CVE-2016-2193) that did not anticipate a scenario involving function inlining. This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications.

This affects only databases that have used CREATE POLICY to define a row security policy.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

postgresql-test-rpm-macros: before 13.18-1.0.1

postgresql-upgrade-devel: before 13.18-1.0.1

postgresql-upgrade: before 13.18-1.0.1

postgresql-test: before 13.18-1.0.1

postgresql-static: before 13.18-1.0.1

postgresql-server-devel: before 13.18-1.0.1

postgresql-server: before 13.18-1.0.1

postgresql-pltcl: before 13.18-1.0.1

postgresql-plpython3: before 13.18-1.0.1

postgresql-plperl: before 13.18-1.0.1

postgresql-docs: before 13.18-1.0.1

postgresql-contrib: before 13.18-1.0.1

postgresql: before 13.18-1.0.1

pg_repack: before 1.4.6-3

pgaudit: before 1.5.0-1

postgres-decoderbufs: before 0.10.0-2

CPE2.3 External links

https://anas.openanolis.cn/errata/detail/ANSA-2024:1167


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Security Features

EUVDB-ID: #VU40402

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2016-2193

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to manipulate data.

PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

postgresql-test-rpm-macros: before 13.18-1.0.1

postgresql-upgrade-devel: before 13.18-1.0.1

postgresql-upgrade: before 13.18-1.0.1

postgresql-test: before 13.18-1.0.1

postgresql-static: before 13.18-1.0.1

postgresql-server-devel: before 13.18-1.0.1

postgresql-server: before 13.18-1.0.1

postgresql-pltcl: before 13.18-1.0.1

postgresql-plpython3: before 13.18-1.0.1

postgresql-plperl: before 13.18-1.0.1

postgresql-docs: before 13.18-1.0.1

postgresql-contrib: before 13.18-1.0.1

postgresql: before 13.18-1.0.1

pg_repack: before 1.4.6-3

pgaudit: before 1.5.0-1

postgres-decoderbufs: before 0.10.0-2

CPE2.3 External links

https://anas.openanolis.cn/errata/detail/ANSA-2024:1167


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Incorrect privilege assignment

EUVDB-ID: #VU100513

Risk: Medium

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-10978

CWE-ID: CWE-266 - Incorrect Privilege Assignment

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges within the application.

The vulnerability exists due to incorrect privilege assignment when application uses SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. A remote user can force the application to reset their role to a wrong user ID and view or change different rows from those intended.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

postgresql-test-rpm-macros: before 13.18-1.0.1

postgresql-upgrade-devel: before 13.18-1.0.1

postgresql-upgrade: before 13.18-1.0.1

postgresql-test: before 13.18-1.0.1

postgresql-static: before 13.18-1.0.1

postgresql-server-devel: before 13.18-1.0.1

postgresql-server: before 13.18-1.0.1

postgresql-pltcl: before 13.18-1.0.1

postgresql-plpython3: before 13.18-1.0.1

postgresql-plperl: before 13.18-1.0.1

postgresql-docs: before 13.18-1.0.1

postgresql-contrib: before 13.18-1.0.1

postgresql: before 13.18-1.0.1

pg_repack: before 1.4.6-3

pgaudit: before 1.5.0-1

postgres-decoderbufs: before 0.10.0-2

CPE2.3 External links

https://anas.openanolis.cn/errata/detail/ANSA-2024:1167


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Improper authorization

EUVDB-ID: #VU100514

Risk: High

CVSSv4.0: 6.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2024-10979

CWE-ID: CWE-285 - Improper Authorization

Exploit availability: No

Description

The vulnerability allows a remote user to compromise the affected system.

The vulnerability exists due to incorrect control of environment variables. A remote unprivileged database user can change sensitive process environment variables (e.g. PATH) and execute arbitrary code on the database server.

Mitigation

Install updates from vendor's repository.

Vulnerable software versions

Anolis OS: 8

postgresql-test-rpm-macros: before 13.18-1.0.1

postgresql-upgrade-devel: before 13.18-1.0.1

postgresql-upgrade: before 13.18-1.0.1

postgresql-test: before 13.18-1.0.1

postgresql-static: before 13.18-1.0.1

postgresql-server-devel: before 13.18-1.0.1

postgresql-server: before 13.18-1.0.1

postgresql-pltcl: before 13.18-1.0.1

postgresql-plpython3: before 13.18-1.0.1

postgresql-plperl: before 13.18-1.0.1

postgresql-docs: before 13.18-1.0.1

postgresql-contrib: before 13.18-1.0.1

postgresql: before 13.18-1.0.1

pg_repack: before 1.4.6-3

pgaudit: before 1.5.0-1

postgres-decoderbufs: before 0.10.0-2

CPE2.3 External links

https://anas.openanolis.cn/errata/detail/ANSA-2024:1167


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###