A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-powerbarUpgrade rubygem-http-acceptUpgrade rubygem-snaky_hashUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-jwtUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade satellite-maintainUpgrade rubygem-version_gemUpgrade rubygem-ffiUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-cliUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-multi_jsonUpgrade rubygem-unf_extUpgrade rubygem-localeUpgrade rubygem-loggingUpgrade rubygem-little-pluggerUpgrade rubygem-clampUpgrade rubygem-highlineUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_googleUpgrade satellite-cloneUpgrade rubygem-unicodeUpgrade rubygem-oauthUpgrade rubygem-oauth-ttyUpgrade rubygem-gssapiUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-display_widthUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-foreman_maintainUpgrade rubygem-hashieUpgrade rubygem-hammer_cliUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unfUpgrade rubygem-mime-types-dataUpgrade rubygem-amazing_printUpgrade rubygem-domain_nameUpgrade rubygem-unf_ext-debuginfoUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_admin | Nov 13, 2023 | Feb 9, 2023 |
| Debian | — | Upgrade rails | Jul 30, 2024 | Feb 9, 2023 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_katelloUpgrade rubygem-http-cookieUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unfUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cliUpgrade rubygem-unf_extUpgrade rubygem-unicodeUpgrade rubygem-domain_nameUpgrade rubygem-oauthUpgrade rubygem-ffi-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-unicode-debugsourceUpgrade rubygem-oauth-ttyUpgrade rubygem-mime-types-dataUpgrade rubygem-powerbarUpgrade rubygem-amazing_printUpgrade satellite-cloneUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-gssapiUpgrade python39-pulp_manifestUpgrade rubygem-localeUpgrade rubygem-fast_gettextUpgrade rubygem-apipie-bindingsUpgrade rubygem-little-pluggerUpgrade satellite-cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-http-acceptUpgrade rubygem-hashieUpgrade foreman-cliUpgrade rubygem-highlineUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-mime-typesUpgrade rubygem-clampUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foremanUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-netrcUpgrade rubygem-ffiUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-version_gemUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-display_width | Nov 13, 2023 | Feb 9, 2023 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfo | Mar 5, 2024 | Feb 9, 2023 |
| Suse | — | Upgrade ruby2.5-rubygem-activerecord-5_1 | Feb 24, 2023 | Feb 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub