The vulnerability of the WriteBind() function in the Npgsql library, which allows a hacker to execute arbitrary code.

The vulnerability of the WriteBind function in the Npgsql library is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

UBUNTU-CVE-2024-32655

Npgsql is the .NET data provider for PostgreSQL. The WriteBind method in src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs uses int variables to store the message length and the sum of parameter lengths. Both variables overflow when the sum of parameter lengths becomes too large. This cause...