CVE-2022-44566

Description

A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.

Affected packages (3)

• Debian/railsfrom 0, < 2:6.0.3.7+dfsg-2+deb11u3
• Debian/railsfrom 0, < 2:6.0.3.7+dfsg-2+deb11u3
• RubyGems/activerecordfrom 0, < 6.1.7.1

CVSS scores

References (13)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-44566
• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2022-44566
• PATCHhttps://github.com/rails/rails
• WEBhttps://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html
• WEBhttps://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119
• WEBhttps://github.com/rails/rails/commit/4f44aa9d514e701ada92b5cf08beccf566eeaebf
• WEBhttps://github.com/rails/rails/commit/82bcdc011e2ff674e7dd8fd8cee3a831c908d29b
• WEBhttps://github.com/rails/rails/releases/tag/v6.1.7.1
• WEBhttps://github.com/rails/rails/releases/tag/v7.0.4.1
• WEBhttps://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2022-44566.yml
• WEBhttps://mailchi.mp/railslts/rails-lts-multiple-dos-vulnerabilities-in-rails-rack-and-globalid
• WEBhttps://makandracards.com/railslts/508019-rails-5-2-lts-changelog#section-jan-20th-2023-rails-version-5-2-8-15
• WEBhttps://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released