logo

Database

Asymmetric denial of service In rails

Description

A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2022-445662. NVD-2022-445663. OSV-2022-445664. OSV-DEBIAN-2022-445665. GCVE-2022-445666. SECURITY-TRACKER-CVE-2022-44566

References

1. https://github.com/rails/rails/commit/4f44aa9d514e701ada92b5cf08beccf566eeaebf2. https://github.com/rails/rails/commit/82bcdc011e2ff674e7dd8fd8cee3a831c908d29b3. https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html4. https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/821195. https://github.com/rails/rails/releases/tag/v6.1.7.16. https://github.com/rails/rails/releases/tag/v7.0.4.17. https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2022-44566.yml8. https://mailchi.mp/railslts/rails-lts-multiple-dos-vulnerabilities-in-rails-rack-and-globalid9. https://makandracards.com/railslts/508019-rails-5-2-lts-changelog#section-jan-20th-2023-rails-version-5-2-8-1510. https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.