Vulnérabilités de la pile Bases de données · Page n° 23

Denial-of-service due to unbounded pattern matching in Redis

Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may result in unbounded recursion, leading to stack overflow and process crash. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• Mettez à jour vers 2:3.0.6-1ubuntu0.4+esm3
• Mettez à jour vers 5:4.0.9-1ubuntu0.2+esm5
• Mettez à jour vers 5:5.0.7-2ubuntu0.1+esm3
• Mettez à jour vers 5:6.0.16-1ubuntu1+esm2
• Mettez à jour vers 5:7.0.15-1ubuntu0.24.04.1
• Mettez à jour vers 5:7.0.15-1~deb12u2
• Mettez à jour vers 5:7.0.15-2
• Mettez à jour vers 7.3.1+ds-1
• Mettez à jour vers 8.0.1+dfsg1-1

Denial-of-service due to malformed ACL selectors in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 prior to versions 7.2.6 and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• Mettez à jour vers 5:7.0.15-1~deb12u2
• Mettez à jour vers 5:7.0.15-2
• Mettez à jour vers 7.3.1+ds-1
• Mettez à jour vers 8.0.1+dfsg1-1

PostgreSQL relation replacement during pg_dump executes arbitrary SQL

Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.

• Mettez à jour vers 10.23-0ubuntu0.18.04.2+esm2
• Mettez à jour vers 12.20
• Mettez à jour vers 12.20-0ubuntu0.20.04.1
• Mettez à jour vers 13.16
• Mettez à jour vers 14.13
• Mettez à jour vers 14.13-0ubuntu0.22.04.1
• Mettez à jour vers 15.8
• Mettez à jour vers 15.8-0+deb12u1
• Mettez à jour vers 16.4
• Mettez à jour vers 16.4-0ubuntu0.24.04.1
• Mettez à jour vers 9.3.24-0ubuntu0.14.04+esm1
• Mettez à jour vers 9.5.25-0ubuntu0.16.04.1+esm8

Specially crafted request could caused undefined behaviour which may lead to Remote Code Execution.

It is possible to crash or redirect the execution flow of the ClickHouse server process from an unauthenticated vector by sending a specially crafted request to the ClickHouse server native interface. This redirection is limited to what is available within a 256-byte range of memory at the time of execution, and no known remote code execution (RCE) code has been produced or exploited.  Fixes have been merged to all currently supported version of ClickHouse. If you are maintaining your own forked version of ClickHouse or using an older version and cannot upgrade, the fix for this vulnerability can be found in this commit  https://github.com/C

• Mettez à jour vers v23.8.15.35-lts
• Mettez à jour vers v24.3.4.147-lts
• Mettez à jour vers v24.4.2.141-stable
• Mettez à jour vers v24.5.1.1763
• Mettez à jour vers v24.6.1.4423-stable

CVE-2024-21185

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.38, 8.4.1 and 9.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.39-0ubuntu0.20.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.22.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.24.04.1

CVE-2024-21179

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.39-0ubuntu0.20.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.22.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.24.04.1

CVE-2024-21177

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.39-0ubuntu0.20.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.22.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.24.04.1

CVE-2024-21176

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.4.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVE-2024-21173

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.39-0ubuntu0.20.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.22.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.24.04.1

CVE-2024-21171

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.39-0ubuntu0.20.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.22.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.24.04.1

CVE-2024-21166

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3

• Mettez à jour vers 8.0.37-0ubuntu0.20.04.3
• Mettez à jour vers 8.0.37-0ubuntu0.22.04.3
• Mettez à jour vers 8.0.37-0ubuntu0.24.04.1

CVE-2024-21165

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.37 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.39-0ubuntu0.20.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.22.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.24.04.1

CVE-2024-21163

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N

• Mettez à jour vers 8.0.39-0ubuntu0.20.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.22.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.24.04.1

CVE-2024-21162

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.39-0ubuntu0.20.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.22.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.24.04.1

CVE-2024-21160

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.37-0ubuntu0.20.04.3
• Mettez à jour vers 8.0.37-0ubuntu0.22.04.3
• Mettez à jour vers 8.0.37-0ubuntu0.24.04.1

CVE-2024-21159

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.37-0ubuntu0.20.04.3
• Mettez à jour vers 8.0.37-0ubuntu0.22.04.3
• Mettez à jour vers 8.0.37-0ubuntu0.24.04.1

CVE-2024-21157

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.37-0ubuntu0.20.04.3
• Mettez à jour vers 8.0.37-0ubuntu0.22.04.3
• Mettez à jour vers 8.0.37-0ubuntu0.24.04.1

CVE-2024-21142

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.39-0ubuntu0.20.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.22.04.1
• Mettez à jour vers 8.0.39-0ubuntu0.24.04.1

CVE-2024-21137

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.36-0ubuntu0.20.04.1
• Mettez à jour vers 8.0.36-0ubuntu0.22.04.1
• Mettez à jour vers 8.0.36-1

CVE-2024-21135

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

• Mettez à jour vers 8.0.37-0ubuntu0.20.04.3
• Mettez à jour vers 8.0.37-0ubuntu0.22.04.3
• Mettez à jour vers 8.0.37-0ubuntu0.24.04.1