PostgreSQL CVE-2020-25696 Incorrect Comparison Vulnerability

Description

The gsetmeta-command, which setspsqlvariables based on query results, does not distinguish variables that controlpsqlbehavior. If an interactivepsqlsession uses gsetwhen querying a compromised server, the attacker can execute arbitrary code as the operating system account runningpsql. Using gsetwith a prefix not found among specially treated variables, e.g. any lowercase string, precludes the attack in an unpatchedpsql.

Affected Applications

PostgreSQL

CVE References

Other References