CVE-2022-44566

Description

A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. Comparing integer values against numeric values can result in a slow sequential scan resulting in potential Denial of Service.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

References

• https://github.com/rails/rails/releases/tag/v7.0.4.1
• https://errata.rockylinux.org/RLSA-2023:6818
• https://www.suse.com/security/cve/CVE-2022-44566.html
• https://nvd.nist.gov/vuln/detail/CVE-2022-44566
• https://github.com/rails/rails/commit/4f44aa9d514e701ada92b5cf08beccf566eeaebf
• https://github.com/rails/rails/commit/82bcdc011e2ff674e7dd8fd8cee3a831c908d29b
• https://code.jeremyevans.net/2022-11-01-forcing-sequential-scans-on-postgresql.html
• https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119
• https://github.com/rails/rails
• https://github.com/rails/rails/releases/tag/v6.1.7.1
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2022-44566.yml
• https://mailchi.mp/railslts/rails-lts-multiple-dos-vulnerabilities-in-rails-rack-and-globalid
• https://makandracards.com/railslts/508019-rails-5-2-lts-changelog#section-jan-20th-2023-rails-version-5-2-8-15
• https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released
• https://security-tracker.debian.org/tracker/CVE-2022-44566