Babelfish for PostgreSQL TDS RPC procedure-name parser out-of-bounds read
On Babelfish servers with an open database port, logged-in users can peek at memory or stall the server.
Summary
The TDS RPC procedure-name parser in Babelfish for PostgreSQL has an out-of-bounds read. A remote authenticated user can send a malformed request to read adjacent process memory or stall the service, affecting self-run Babelfish and Amazon Aurora PostgreSQL with Babelfish.
Affected when
- TDS port (default 1433) reachable over the network
- remote authenticated user
What to do
Update the Babelfish extension to 4.10, 5.6, 6.1 or later. For Aurora PostgreSQL, upgrade the cluster to the matching version in the list and apply pending maintenance. Until then, restrict network access to the TDS port (default 1433).
Update to at least the version for your product:
- babelfish-for-postgresql 4.x 4.10 or later
- babelfish-for-postgresql 5.x 5.6 or later
- babelfish-for-postgresql 6.x 6.1 or later
Products and platforms
CVE IDs
Sources
Times
First published
First seen