CVE-2022-44566
published 2023-02-09CVE-2022-44566: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer…
PriorityP337high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.26%
66.4th percentile
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| activerecord_project | activerecord | < 6.1.7.1 | 6.1.7.1 |
| activerecord_project | activerecord | >= 0 < 6.1.7.1 | 6.1.7.1 |
| activerecord_project | activerecord | >= 7.0.0 < 7.0.4.1 | 7.0.4.1 |
| activerecord_project | activerecord | >= 7.0.0 < 7.0.4.1 | 7.0.4.1 |
| debian | rails | < rails 2:6.1.7.3+dfsg-1 (bookworm) | rails 2:6.1.7.3+dfsg-1 (bookworm) |
| https | github.com_rails_rails | — | — |
| rubyonrails | rails | >= 0 < 2:6.0.3.7+dfsg-2+deb11u3 | 2:6.0.3.7+dfsg-2+deb11u3 |
| rubyonrails | rails | >= 0 < 2:6.1.7.3+dfsg-1 | 2:6.1.7.3+dfsg-1 |
| rubyonrails | rails | >= 0 < 2:6.1.7.3+dfsg-1 | 2:6.1.7.3+dfsg-1 |
| rubyonrails | rails | >= 0 < 2:6.1.7.3+dfsg-1 | 2:6.1.7.3+dfsg-1 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ghsa7.5HIGH
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2022-44566: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7
osv·2023-02-09·CVSS 7.5
CVE-2022-44566 [HIGH] CVE-2022-44566: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.
GHSA
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
ghsa·2023-01-18·CVSS 7.5
CVE-2022-44566 [HIGH] CWE-400 Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
There is a potential denial of service vulnerability present in ActiveRecord's PostgreSQL adapter.
This has been assigned the CVE identifier CVE-2022-44566.
Versions Affected: All. Not affected: None.
## Fixed Versions
- 2.3.18.47 (Rails LTS, which is a paid service and not part of the rubygem)
- 3.2.22.34 (Rails LTS, which is a paid service and not part of the rubygem)
- 4.2.11.27 (Rails LTS, which is a paid service and not part of the rubygem)
- 5.2.8.15 (Rails LTS, which is a paid service and not part of the rubygem)
- 6.1.7.1
- 7.0.4.1
## Impact
In ActiveRecord < 7.0.4.1 and < 6.1.7.1, when a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the t
OSV
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
osv·2023-01-18·CVSS 7.5
CVE-2022-44566 [HIGH] Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
There is a potential denial of service vulnerability present in ActiveRecord's PostgreSQL adapter.
This has been assigned the CVE identifier CVE-2022-44566.
Versions Affected: All. Not affected: None.
## Fixed Versions
- 2.3.18.47 (Rails LTS, which is a paid service and not part of the rubygem)
- 3.2.22.34 (Rails LTS, which is a paid service and not part of the rubygem)
- 4.2.11.27 (Rails LTS, which is a paid service and not part of the rubygem)
- 5.2.8.15 (Rails LTS, which is a paid service and not part of the rubygem)
- 6.1.7.1
- 7.0.4.1
## Impact
In ActiveRecord < 7.0.4.1 and < 6.1.7.1, when a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the t
Red Hat
rubygem-activerecord: Denial of Service
vendor_redhat·2023-01-20·CVSS 7.5
CVE-2022-44566 [HIGH] CWE-400 rubygem-activerecord: Denial of Service
rubygem-activerecord: Denial of Service
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.
A flaw was found in the rubygem-activerecord. RubyGem's ActiveRecord is vulnerable to a denial of service caused by a flaw in the PostgreSQL adapter. By sending a specially-crafted request, a remote attacker can cause a slow sequential scan, resulting in a denial of service.
Debian
CVE-2022-44566: rails - A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <...
vendor_debian·2022·CVSS 7.5
CVE-2022-44566 [HIGH] CVE-2022-44566: rails - A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <...
A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.
Scope: local
bookworm: resolved (fixed in 2:6.1.7.3+dfsg-1)
bullseye: resolved (fixed in 2:6.0.3.7+dfsg-2+deb11u3)
forky: resolved (fixed in 2:6.1.7.3+dfsg-1)
sid: resolved (fixed in 2:6.1.7.3+dfsg-1)
trixie: resolved (fixed in 2:6.1.7.3+dfsg-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.htmlhttps://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.htmlhttps://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119
2023-02-09
Published