CVE-2020-14349: opensuse leap SQL Injection
CVSS: 7.1v3.1HighModified
AliasesALPINE-CVE-2020-14349UBUNTU-CVE-2020-14349
Published 24-08-2020Last modified 04-08-2024
Vulnerability summary
CVE-2020-14349 is a high (CVSS 7.1) SQL Injection vulnerability in opensuse leap. EPSS estimates a 2.23% chance of exploitation in the next 30 days, higher than 82.5% of scored vulnerabilities.
CVSS score
7.1/10
010
High · v3.1 (NVD)EPSS score
2.23%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 24 · Related 15MGASA-2020-0365OPENSUSE-SU-2020:1228-1OPENSUSE-SU-2020:1243-1OPENSUSE-SU-2020:1244-1OPENSUSE-SU-2020:1312-1OPENSUSE-SU-2020:1326-1OPENSUSE-SU-2024:11184-1OPENSUSE-SU-2024:11185-1OPENSUSE-SU-2024:11186-1RHSA-2020:3669RHSA-2020:5110RHSA-2020:5112RHSA-2020:5620RHSA-2020:5664RHSA-2021:0163RHSA-2021:0166RHSA-2021:0988SUSE-SU-2020:2264-1SUSE-SU-2020:2265-1SUSE-SU-2020:2271-1SUSE-SU-2020:2355-1SUSE-SU-2020:3464-1SUSE-SU-2020:3630-1USN-4472-1
Timeline
- 24-08-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
It was found that PostgreSQL versions before 12.4, before 11.9 and before 10.14 did not properly sanitize the search_path during logical replication. An authenticated attacker could use this flaw in an attack similar to CVE-2018-1058, in order to execute arbitrary SQL command in the context of the user used for replication.
CVSS metrics
4 scores · 3 sources · 2 versionsHigh 7.1Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · AlpineEcosystem advisory · calculated7.1HighCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.1HighCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Medium 4.6Preferred score · NVD (NIST)
AV:N/AC:H/Au:S/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
2.23%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
0.00 pp
From 2.23% on 18-09-2026
18-09-202618-10-2026
EPSS score2.23%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
- CWE-427Uncontrolled Search Path ElementThe product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Affected systems
Alpine3 products
- postgresql≥ 10.0, < 11.9-r0 | ≥ 10.0, < 12.4-r0
- postgresql14< 12.4-r0
- postgresql15< 12.4-r0
Ubuntu2 products
- postgresql-10< 10.14-0ubuntu0.18.04.1
- postgresql-12< 12.4-0ubuntu0.20.04.1
Opensuse1 product
- leapEOL15.1 | 15.2
Postgresql1 product
- postgresql≥ 10.0, < 10.14 | ≥ 11.0, < 11.9 | ≥ 12.0, < 12.4
4 vendors · 7 products
References
15 links- lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.htmlVendor AdvisoryX Refsource SUSEBroken LinkMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-09/msg00003.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-09/msg00008.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
