CVE-2024-7348
Last modified
CVE-2024-7348 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. EPSS estimates a 1.57% chance of exploitation in the next 30 days.
Description
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running pg_dump, which is often a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for pg_dump to start, but winning the race condition is trivial if the attacker retains an open transaction. Versions before PostgreSQL 16.4, 15.8, 14.13, 13.16, and 12.20 are affected.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Postgresql | Postgresql | >= 12.0, < 12.20 |
| Postgresql | Postgresql | >= 13.0, < 13.16 |
| Postgresql | Postgresql | >= 14.0, < 14.13 |
| Postgresql | Postgresql | >= 15.0, < 15.8 |
| Postgresql | Postgresql | >= 16.0, < 16.4 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-7348?
How severe is CVE-2024-7348?
How do I fix CVE-2024-7348?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-7342A vulnerability was found in Baidu UEditor 1.4.3.3. It has b…6.1
- CVE-2024-7343A vulnerability was found in Baidu UEditor 1.4.2. It has bee…6.1
- CVE-2024-7344Howyar UEFI Application "Reloader" (32-bit and 64-bit) is …8.2
- CVE-2024-7345Local ABL Client bypass of the required PASOE security check…9.6
- CVE-2024-7346Host name validation for TLS certificates is bypassed when t…4.8
- CVE-2024-7347NGINX Open Source and NGINX Plus have a vulnerability in the…4.7
- CVE-2024-7349The LifterLMS – WP LMS for eLearning, Online Courses, & Quiz…7.2
- CVE-2024-7350The Appointment Booking Calendar Plugin and Online Schedulin…9.8
- CVE-2024-7351The Simple Job Board plugin for WordPress is vulnerable to P…7.2
- CVE-2024-7352PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remo…7.8
- CVE-2024-7353The Accept Stripe Payments plugin for WordPress is vulnerabl…5.4
- CVE-2024-7354The Ninja Forms WordPress plugin before 3.8.11 does not esc…6.1
Are you affected by CVE-2024-7348?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST