High MSRC-CVE-2024-0985 1 CVE

CVE-2024-0985

Published Feb 13, 2024 · Updated Jun 30, 2024 · Revision 2

Vendor: Microsoft

Summary

Customer action: Required.

Details

Security updates
14.11-1 — https://nvd.nist.gov/vuln/detail/CVE-2024-0985

Vulnerabilities 1

High 8.0

CVE-2024-0985

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refres…

postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 8, 2024

Revision history

2024-06-30 #2
Information published.
2024-02-12 #1
Information published.

References

CVE-2024-0985 - HTML
https://api.msrc.microsoft.com/cvrf/v3.0/updates('CVE-2024-0985')
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss