Lucene search
Ubuntu.comUB:CVE-2024-1713HistoryMar 14, 2024 - 12:00 a.m.
CVE-2024-1713
2024-03-1400:00:00
ubuntu.com
ubuntu.com
7
plv8
database
deferred triggers
superuser
autovacuum
unix
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H
AI Score
7.5
Confidence
High
EPSS
0
Percentile
9.0%
A user who can create objects in a database with plv8 3.2.1 installed is
able to cause deferred triggers to execute as the Superuser during
autovacuum.
Related
cve
cve
CVE-2024-1713
2024-03-14 21:15:50
nvd
nvd
CVE-2024-1713
2024-03-14 21:15:50
cvelist
cvelist
CVE-2024-1713 Plv8 Deferred Trigger Privilege Escalation
2024-03-14 20:14:28
vulnrichment
vulnrichment
CVE-2024-1713 Plv8 Deferred Trigger Privilege Escalation
2024-03-14 20:14:28
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H
AI Score
7.5
Confidence
High
EPSS
0
Percentile
9.0%
Related for UB:CVE-2024-1713