22-Year-Old PostgreSQL Bug Turned into Remote Code Execution

Correct me if I'm wrong, but those all look like sql exploits. Don't those already require some sort of authenticated remote access. They are security issues, but calling them remote code exploitation make them seem more dangerous than they are.

These seem more like privilege escalation, you have access through a database account and use that to gain full access to the whole server. So an issue for multi-tenant databases mostly.

I would call this more of a privilege escalation attack than RCE.

Is this exploitable? If it is, this is very serious and if this is an unpatched disclosure millions of Businesses around the world will be affected.

Amazing write-up. A great look at DB internals and your thought process.

Thanks for actually sharing your path to the zero-day. The context and story helps

[flagged]

[flagged]