7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-jqcq-xjh3-6g23

GHSA-jqcq-xjh3-6g23: Denial of service in github.com/jackc/pgproto3/v2

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-jqcq-xjh3-6g23

GHSA-jqcq-xjh3-6g23:

7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/jackc/pgproto3/v2	go	>= 2.0.0, <= 2.3.3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the vulnerability was based on the detailed information provided in the GitHub issues, particularly https://github.com/jackc/pgx/issues/2507 and https://github.com/golang/vulndb/issues/4518. These issues clearly identify the vulnerable function as DataRow.Decode in the file data_row.go of the github.com/jackc/pgproto3/v2 package. The issue descriptions provide a detailed root cause analysis, including the exact lines of code that are vulnerable. The vulnerability is caused by improper validation of a length field read from the network, which can be a negative value. This negative value bypasses a length check and causes a panic in a subsequent slicing operation, leading to a denial of service. Although no direct fixing commit was found, the evidence from the issues is conclusive and sufficient to identify the vulnerable function with high confidence.

Vulnerable functions

DataRow.Decode

data_row.go

The `DataRow.Decode` function in `data_row.go` is vulnerable to a denial of service. It reads a field length from the network, but fails to properly validate if the length is a negative number (other than the special value -1 for NULL). When a negative length is received, a subsequent length check is bypassed, leading to a slice operation with a negative length, which causes a panic (`slice bounds out of range`). A malicious PostgreSQL server can exploit this to crash a client.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.