CVE-2017-16082
Critical
Description
A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) Connecting to an untrusted database and executing a query which returns results where any of the column names are malicious.
SeverityCritical
CVSS9.8
Exploit probability—
ProductNode-postgres Pg
PublishedJun 7, 2018
First seenJun 7, 2018
Weakness typeCWE-94Code injection
How to fix
Update
- node-postgres pg2.11.2, 3.6.4, 4.5.7, 5.2.1, 6.4.2, 7.1.2 or later
- pg2.11.2, 3.6.4, 4.5.7, 5.2.1, 6.0.5, 6.1.6, 6.2.5, 6.3.3, 6.4.2, 7.0.2, 7.1.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| node-postgres pg | 2.0.0 ≤ v < 2.11.2, 3.0.0 ≤ v < 3.6.4, 4.0.0 ≤ v < 4.5.7, 5.0.0 < v < 5.2.1, 6.0.0 ≤ v < 6.4.2, 7.0.0 ≤ v < 7.1.2 | 2.11.2, 3.6.4, 4.5.7, 5.2.1, 6.4.2, 7.1.2 |
| pgnpm | v < 2.11.2, 3.0.0 ≤ v < 3.6.4, 4.0.0 ≤ v < 4.5.7, 5.0.0 ≤ v < 5.2.1, 6.0.0 ≤ v < 6.0.5, 6.1.0 ≤ v < 6.1.6, 6.2.0 ≤ v < 6.2.5, 6.3.0 ≤ v < 6.3.3, 6.4.0 ≤ v < 6.4.2, 7.0.0 ≤ v < 7.0.2, 7.1.0 ≤ v < 7.1.2 | 2.11.2, 3.6.4, 4.5.7, 5.2.1, 6.0.5, 6.1.6, 6.2.5, 6.3.3, 6.4.2, 7.0.2, 7.1.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.