CVE-2023-32305 aiven-extras PostgreSQL Privilege Escalation Through Overloaded Search Path
A low-privileged user can escalate to superuser privileges in PostgreSQL via the aiven-extras extension, potentially leading to arbitrary code execution on the host.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-32305?
CVE-2023-32305 is a high-severity vulnerability in aiven-extras, published on 12 May 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
aiven-extras is a PostgreSQL extension. Versions prior to 1.1.9 contain a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages missing schema qualifiers on privileged functions called by the aiven-extras extension. A low privileged user can create objects that collide with existing function names, which will then be executed instead. Exploiting this vulnerability could allow a low privileged user to acquire `superuser` privileges, which would allow full, unrestricted access to all data and database functions. And could lead to arbitrary code execution or data access on the underlying host as the `postgres` user. The issue has been patched as of version 1.1.9.
Which versions are affected by CVE-2023-32305?
It affects 1 product.
Products include Aiven Aiven.
How do I fix CVE-2023-32305?
No fix has been published for CVE-2023-32305 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-32305 being exploited?
There is no known exploitation of CVE-2023-32305 in the wild and no public exploit code.
Sources
Also known as GHSA-7r4w-fw4h-67gp.