Use After Free in PostgreSQL Trigger Functions

Executive Summary

This is a use-after-free vulnerability in PostgreSQL trigger functions. It allows an object creator to execute arbitrary code as the operating system user running the database by using a cursor over a transition table.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking PostgreSQL versions against affected releases. Run 'psql --version' to check your PostgreSQL version. If your version is below 18.7, 17.12, 16.16, 15.20, or 14.25, the system is vulnerable. Additionally, review database logs for unusual activity involving trigger functions or cursor operations.

Useful 0 Not Useful 0

Impact Analysis

An attacker with object creation privileges could exploit this to run malicious code on the database server, potentially gaining control over the system or accessing sensitive data.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's data protection requirements and HIPAA's security rules for protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update PostgreSQL to a fixed version: 18.7, 17.12, 16.16, 15.20, or 14.25 or later. Restrict database access to trusted users and avoid using untrusted objects in trigger functions. Monitor for suspicious activity in database logs.

Useful 0 Not Useful 0