diff --git a/advisories/github-reviewed/2024/03/GHSA-7jwh-3vrq-q3m8/GHSA-7jwh-3vrq-q3m8.json b/advisories/github-reviewed/2024/03/GHSA-7jwh-3vrq-q3m8/GHSA-7jwh-3vrq-q3m8.json index 0d553d99118..abce989f87b 100644 --- a/advisories/github-reviewed/2024/03/GHSA-7jwh-3vrq-q3m8/GHSA-7jwh-3vrq-q3m8.json +++ b/advisories/github-reviewed/2024/03/GHSA-7jwh-3vrq-q3m8/GHSA-7jwh-3vrq-q3m8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7jwh-3vrq-q3m8", - "modified": "2024-03-14T21:46:07Z", + "modified": "2024-09-13T15:36:58Z", "published": "2024-03-04T20:45:25Z", "aliases": [ @@ -9,7 +9,14 @@ "summary": "pgproto3 SQL Injection via Protocol Message Size Overflow", "details": "### Impact\n\nSQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control.\n\n### Patches\n\nThe problem is resolved in v2.3.3\n\n### Workarounds\n\nReject user input large enough to cause a single query or bind message to exceed 4 GB in size.\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" + } ], "affected": [ { @@ -49,44 +56,6 @@ ] } ] - }, - { - "package": { - "ecosystem": "Go", - "name": "github.com/jackc/pgx/v4" - }, - "ranges": [ - { - "type": "ECOSYSTEM", - "events": [ - { - "introduced": "0" - }, - { - "fixed": "4.18.2" - } - ] - } - ] - }, - { - "package": { - "ecosystem": "Go", - "name": "github.com/jackc/pgx/v5" - }, - "ranges": [ - { - "type": "ECOSYSTEM", - "events": [ - { - "introduced": "5.0.0" - }, - { - "fixed": "5.5.4" - } - ] - } - ] } ], "references": [ @@ -128,7 +97,7 @@ "CWE-190", "CWE-89" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-03-04T20:45:25Z", "nvd_published_at": null diff --git a/advisories/github-reviewed/2024/03/GHSA-mrww-27vc-gghv/GHSA-mrww-27vc-gghv.json b/advisories/github-reviewed/2024/03/GHSA-mrww-27vc-gghv/GHSA-mrww-27vc-gghv.json index cba66b21901..a5aa50b359a 100644 --- a/advisories/github-reviewed/2024/03/GHSA-mrww-27vc-gghv/GHSA-mrww-27vc-gghv.json +++ b/advisories/github-reviewed/2024/03/GHSA-mrww-27vc-gghv/GHSA-mrww-27vc-gghv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mrww-27vc-gghv", - "modified": "2024-03-14T21:45:18Z", + "modified": "2024-09-13T15:36:55Z", "published": "2024-03-04T20:43:24Z", "aliases": [ "CVE-2024-27304" @@ -9,7 +9,14 @@ "summary": "pgx SQL Injection via Protocol Message Size Overflow", "details": "### Impact\n\nSQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control.\n\n### Patches\n\nThe problem is resolved in v4.18.2 and v5.5.4.\n\n### Workarounds\n\nReject user input large enough to cause a single query or bind message to exceed 4 GB in size.\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U" + } ], "affected": [ { @@ -50,44 +57,6 @@ } ] }, - { - "package": { - "ecosystem": "Go", - "name": "github.com/jackc/pgproto3" - }, - "ranges": [ - { - "type": "ECOSYSTEM", - "events": [ - { - "introduced": "0" - }, - { - "fixed": "2.3.3" - } - ] - } - ] - }, - { - "package": { - "ecosystem": "Go", - "name": "github.com/jackc/pgproto3/v2" - }, - "ranges": [ - { - "type": "ECOSYSTEM", - "events": [ - { - "introduced": "0" - }, - { - "fixed": "2.3.3" - } - ] - } - ] - }, { "package": { "ecosystem": "Go", @@ -162,7 +131,7 @@ "CWE-190", "CWE-89" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-03-04T20:43:24Z", "nvd_published_at": "2024-03-06T19:15:08Z"