Is CVE-2024-0985 in the CISA KEV catalog?

No. CVE-2024-0985 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-0985?

CVE-2024-0985 has a CVSS v3 base score of 8.0 (HIGH).

What is the EPSS score for CVE-2024-0985?

CVE-2024-0985 has an EPSS score of 1.47% (70th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-0985?

Upgrade postgresql-13 on debian 11 to 13.14-0+deb11u1 or later. Fixes are available for 175 affected products.

CVE & CISA-KEV Catalog

CVE-2024-0985

HIGHEPSS 70th pctl

8.0

CVSS v3

NVD

Description

Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The victim is a superuser or member of one of the attacker's roles. The attack requires luring the victim into running REFRESH MATERIALIZED VIEW CONCURRENTLY on the attacker's materialized view. Versions before PostgreSQL 16.2, 15.6, 14.11, 13.14, and 12.18 are affected.

CWE-271

How to fix

Remediation Available

postgresql-13Debian

Fixed in:13.14-0+deb11u1CVE-2024-0985

pg_repackRocky

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.x86_64::postgresql:15RHSA-2024:0973

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15RHSA-2024:1314

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.aarch64::postgresql:15RHSA-2024:0973

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.ppc64le::postgresql:15RHSA-2024:0973

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.s390x::postgresql:15RHSA-2024:0973

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64::postgresql:12RHSA-2024:1069

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.s390x::postgresql:15RHSA-2024:1017

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.aarch64::postgresql:12RHSA-2024:1069

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.src::postgresql:12RHSA-2024:1069

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.src::postgresql:15RHSA-2024:1017

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.aarch64::postgresql:15RHSA-2024:1017

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.x86_64::postgresql:15RHSA-2024:1017

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64::postgresql:12RHSA-2024:1070

Fixed in:0:1.4.6-3.module+el8.9.0+19330+c97ddbdf.aarch64::postgresql:12RHSA-2024:0974

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.x86_64::postgresql:15RHSA-2024:1314

Fixed in:0:1.4.6-3.module+el8.9.0+19330+c97ddbdf.src::postgresql:12RHSA-2024:0974

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15RHSA-2024:1314

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.s390x::postgresql:12RHSA-2024:1070

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15RHSA-2024:1314

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.src::postgresql:15RHSA-2024:1314

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12RHSA-2024:1070

Fixed in:0:1.4.6-3.module+el8.9.0+19330+c97ddbdf.ppc64le::postgresql:12RHSA-2024:0974

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12RHSA-2024:1069

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.aarch64::postgresql:12RHSA-2024:1070

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.src::postgresql:12RHSA-2024:1070

Fixed in:0:1.4.6-3.module+el8.9.0+19330+c97ddbdf.x86_64::postgresql:12RHSA-2024:0974

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13RHSA-2024:1315

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.src::postgresql:13RHSA-2024:0975

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.aarch64::postgresql:13RHSA-2024:0975

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.src::postgresql:15RHSA-2024:0950

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15RHSA-2024:0950

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.s390x::postgresql:12RHSA-2024:1069

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.src::postgresql:13RHSA-2024:1315

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.ppc64le::postgresql:13RHSA-2024:0975

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13RHSA-2024:1315

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.s390x::postgresql:13RHSA-2024:0975

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13RHSA-2024:1315

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.x86_64::postgresql:13RHSA-2024:0975

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15RHSA-2024:0950

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.x86_64::postgresql:13RHSA-2024:1315

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.x86_64::postgresql:13RHSA-2024:1426

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13RHSA-2024:1426

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15RHSA-2024:0950

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13RHSA-2024:1426

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13RHSA-2024:1426

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.src::postgresql:13RHSA-2024:1426

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.x86_64::postgresql:15RHSA-2024:0950

Fixed in:0:1.4.6-3.module+el8.9.0+19330+c97ddbdf.s390x::postgresql:12RHSA-2024:0974

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.src::postgresql:15RHSA-2024:0973

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.ppc64le::postgresql:15RHSA-2024:1017

pg_repackRed Hat / RHEL