8.8

CVE-2024-7348: postgresql

CVSS: 8.8v3.1HighModified
AliasesALPINE-CVE-2024-7348MGASA-2024-0301SUSE-SU-2024:3153-1
Published 08-08-2024Last modified 22-08-2024
Open JSON

Vulnerability summary

CVE-2024-7348 is a high (CVSS 8.8) vulnerability in postgresql. EPSS estimates a 1.57% chance of exploitation in the next 30 days, higher than 74.8% of scored vulnerabilities.

Overall risk
36/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
1.57%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 8 · Related 4
OPENSUSE-SU-2024:14360-1RHSA-2024:5927RHSA-2024:5929RHSA-2024:6001RHSA-2024:6020RHSA-2024:6142

Timeline

  1. 08-08-2024
    PublishedVulnerability first disclosed.
  2. 22-08-2024
    Last modifiedVulnerability information updated.

Description

Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.

CVSS metrics

8 scores · 8 sources · 1 version

EPSS trend

Probability

1.57%

Chance of exploitation in the next 30 days

Percentile

75%

Versus all other CVEs

30-day change

0.00 pp

From 1.57% on 18-09-2026

18-09-202618-10-2026
EPSS score
1.57%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse79 products
  • postgresql12&distro=SUSE Enterprise Storage 7.1< 12.20-150200.8.63.1
  • postgresql12&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 12.20-150200.8.63.1
  • postgresql12&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 12.20-150200.8.63.1
  • postgresql12&distro=SUSE Linux Enterprise Server 12 SP5< 12.20-3.58.1
  • postgresql12&distro=SUSE Linux Enterprise Server 15 SP2-LTSS< 12.20-150200.8.63.1
Redhat40 products
  • pg_repack< 0:1.4.6-3.module+el8.9.0+19330+c97ddbdf | < 0:1.4.6-3.module+el8.9.0+20664+9c30cf7f | < 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.4.6-3.module+el8.5.0+11357+bcc62552
  • pg_repack-debuginfo< 0:1.4.6-3.module+el8.9.0+19330+c97ddbdf | < 0:1.4.6-3.module+el8.9.0+20664+9c30cf7f | < 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.4.6-3.module+el8.5.0+11357+bcc62552
  • pg_repack-debugsource< 0:1.4.6-3.module+el8.9.0+19330+c97ddbdf | < 0:1.4.6-3.module+el8.9.0+20664+9c30cf7f | < 0:1.4.6-3.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.8-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.4.6-3.module+el8.5.0+11357+bcc62552
  • pgaudit< 0:1.4.0-7.module+el8.10.0+22214+9beb89d6 | < 0:1.5.0-1.module+el8.9.0+20664+9c30cf7f | < 0:1.4.0-5.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 | < 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 | < 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.5.0-1.module+el8.4.0+8873+b821c30a
  • pgaudit-debuginfo< 0:1.4.0-7.module+el8.10.0+22214+9beb89d6 | < 0:1.5.0-1.module+el8.9.0+20664+9c30cf7f | < 0:1.4.0-5.module+el8.5.0+11354+78b3c9c5 | < 0:1.4.0-4.module+el8.2.0+9043+1dbb5661 | < 0:1.4.0-6.module+el8.4.0+11288+c193d6d7 | < 0:1.7.0-1.module+el9.2.0+17405+aeb9ec60 | < 0:1.5.0-1.module+el8.4.0+8873+b821c30a
Opensuse15 products
  • postgresql12&distro=openSUSE Leap 15.5< 12.20-150200.8.63.1
  • postgresql12&distro=openSUSE Leap 15.6< 12.20-150200.8.63.1
  • postgresql12&distro=openSUSE Tumbleweed< 12.20-1.1
  • postgresql13&distro=openSUSE Leap 15.5< 13.16-150200.5.61.1
  • postgresql13&distro=openSUSE Leap 15.6< 13.16-150200.5.61.1
Ubuntu6 products
  • postgresql-10< 10.23-0ubuntu0.18.04.2+esm2
  • postgresql-12< 12.20-0ubuntu0.20.04.1
  • postgresql-14< 14.13-0ubuntu0.22.04.1
  • postgresql-16< 16.4-0ubuntu0.24.04.1
  • postgresql-9.3< 9.3.24-0ubuntu0.14.04+esm1
Chainguard5 products
  • postgresql-13< 13.22-r1
  • postgresql-14< 14.19-r1
  • postgresql-14-client< 14.24-r2
  • postgresql-15< 15.14-r0
  • postgresql-15-clientAll versions (No fix recorded)
Wolfi5 products
  • postgresql-13< 13.22-r1
  • postgresql-14< 14.19-r1
  • postgresql-14-client< 14.24-r2
  • postgresql-15< 15.14-r0
  • postgresql-15-clientAll versions (No fix recorded)
Alpine3 products
  • postgresql14< 14.13-r0
  • postgresql15< 15.8-r0
  • postgresql16< 16.4-r0
Debian2 products
  • postgresql-13< 13.16-0+deb11u1
  • postgresql-15< 15.8-0+deb12u1
Mageia2 products
  • postgresql13< 13.16-1.mga9
  • postgresql15< 15.8-1.mga9
Postgresql1 product
  • postgresql≥ 12.0, < 12.20 | ≥ 13.0, < 13.16 | ≥ 14.0, < 14.13 | ≥ 15.0, < 15.8 | ≥ 16.0, < 16.4

10 vendors · 158 products

References

66 links
Show all 66 references