Vulnerability-Lookup

CERTFR-2021-AVI-663

Vulnerability from certfr_avis - Published: 2021-08-30 - Updated: 2021-08-30

Une vulnérabilité a été découverte dans l'extension set_user de PostgreSQL. Elle permet à un attaquant de provoquer une élévation de privilèges.

Note : l'extension 'set_user' permet d'autoriser une élévation de privilèges pour un utilisateur donné. La vulnérabilité permet d'altérer les privilèges initialement accordés.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	PostgreSQL	PostgreSQL	PostgreSQL set_user versions antérieures à 2.0.1

References

Title

Publication Time

Tags

Bulletin de sécurité PostgreSQL du 28 août 2021

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "PostgreSQL set_user versions ant\u00e9rieures \u00e0 2.0.1",
      "product": {
        "name": "PostgreSQL",
        "vendor": {
          "name": "PostgreSQL",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-38140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-38140"
    }
  ],
  "initial_release_date": "2021-08-30T00:00:00",
  "last_revision_date": "2021-08-30T00:00:00",
  "links": [],
  "reference": "CERTFR-2021-AVI-663",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-08-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans l\u0027extension set_user de\nPostgreSQL. Elle permet \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n\nNote : l\u0027extension \u0027set_user\u0027 permet d\u0027autoriser une \u00e9l\u00e9vation de\nprivil\u00e8ges pour un utilisateur donn\u00e9. La vuln\u00e9rabilit\u00e9 permet d\u0027alt\u00e9rer\nles privil\u00e8ges initialement accord\u00e9s.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans l\u0027extension set_user de PostgreSQL",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PostgreSQL du 28 ao\u00fbt 2021",
      "url": "https://www.postgresql.org/about/news/set_user-201-released-2279/"
    }
  ]
}

CVE-2021-38140 (GCVE-0-2021-38140)

Vulnerability from cvelistv5 – Published: 2021-08-10 18:00 – Updated: 2024-08-04 01:37

Summary

The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user().

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	https://github.com/pgaudit/set_user/compare/REL2_…	x_refsource_MISC
	https://github.com/pgaudit/set_user/releases/tag/…	x_refsource_CONFIRM

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T01:37:14.860Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/pgaudit/set_user/releases/tag/REL2_0_1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user()."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-10T18:00:43",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pgaudit/set_user/releases/tag/REL2_0_1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-38140",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user()."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1",
              "refsource": "MISC",
              "url": "https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1"
            },
            {
              "name": "https://github.com/pgaudit/set_user/releases/tag/REL2_0_1",
              "refsource": "CONFIRM",
              "url": "https://github.com/pgaudit/set_user/releases/tag/REL2_0_1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-38140",
    "datePublished": "2021-08-10T18:00:43",
    "dateReserved": "2021-08-05T00:00:00",
    "dateUpdated": "2024-08-04T01:37:14.860Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2021-AVI-663

Solution

CVE-2021-38140 (GCVE-0-2021-38140)

Tags

Sightings

Nomenclature