Github.Com Jackc Pgproto3 vulnerabilities

1 known vulnerability affecting github.com/jackc_pgproto3.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2024-27304HIGH≥ 0, < 2.3.32024-03-04
CVE-2024-27304 [HIGH] pgproto3 SQL Injection via Protocol Message Size Overflow pgproto3 SQL Injection via Protocol Message Size Overflow ### Impact SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. ### Patches The problem is resolved in v2.3.3 ### Workarounds Reject user input large enough to
osv