Arbitrary Code Execution in PostgreSQL pg_restore

Executive Summary

This vulnerability involves improper input validation in PostgreSQL's pg_restore utility. It allows a non-plain archive provider to execute arbitrary code as the operating system user running pg_restore through a crafted archive. This differs from legitimate SQL execution during restoration, as it enables full OS-level code execution in the pg_restore process itself.

Useful 0 Not Useful 0

Detection Guidance

Check PostgreSQL version with 'pg_restore --version' to see if it is below 18.7, 17.12, 16.16, 15.20, or 14.25. Monitor for unexpected system commands executed during pg_restore operations.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to run malicious code on your system with the same privileges as the user running pg_restore. This could lead to data theft, system compromise, or further network infiltration. The high CVSS score of 8.8 indicates significant risk to confidentiality, integrity, and availability.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's integrity and confidentiality requirements or HIPAA's safeguards for protected health information. Organizations using affected PostgreSQL versions may face compliance violations if exploited.

Useful 0 Not Useful 0

Mitigation Strategies

Update PostgreSQL to version 18.7, 17.12, 16.16, 15.20, or 14.25 or later. Avoid using untrusted archive files with pg_restore until patched.

Useful 0 Not Useful 0