Database/Control plane, storage & DevOps
PostgreSQL: PL/Perl lets an unprivileged DB user change process env vars (e.g. PATH)
CVE-2024-10979Control plane, storage & DevOpscurated
Impact
PL/Perl lets an unprivileged DB user change process env vars (e.g. PATH) -> arbitrary code execution
Who can reach it
Network (remote)
What to do
Control-plane: minor-version upgrade of the control-plane DB
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.