Is CVE-2024-10979 in the CISA KEV catalog?

No. CVE-2024-10979 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-10979?

CVE-2024-10979 has a CVSS v3 base score of 8.8 (HIGH).

What is the EPSS score for CVE-2024-10979?

CVE-2024-10979 has an EPSS score of 4.42% (90th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-10979?

Upgrade postgresql-13 on debian 11 to 13.17-0+deb11u1 or later. Fixes are available for 95 affected products.

CVE & CISA-KEV Catalog

CVE-2024-10979

HIGHEPSS 90th pctl

8.8

CVSS v3

NVD

Description

Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g. PATH). That often suffices to enable arbitrary code execution, even if the attacker lacks a database server operating system user. Versions before PostgreSQL 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 are affected.

CWE-15 CWE-610

How to fix

Remediation Available

postgresql-13Debian

Fixed in:13.17-0+deb11u1CVE-2024-10979

pg_repackRocky

Fixed in:0:1.4.6-3.module+el8.9.0+19330+c97ddbdf.aarch64::postgresql:12RHSA-2024:10785

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.aarch64::postgresql:13RHSA-2024:10832

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.s390x::postgresql:15RHSA-2024:10851

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.src::postgresql:15RHSA-2024:10787

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.s390x::postgresql:12RHSA-2024:10705

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.x86_64::postgresql:13RHSA-2024:10800

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.x86_64::postgresql:15RHSA-2024:10736

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.x86_64::postgresql:13RHSA-2024:10832

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.aarch64::postgresql:12RHSA-2024:10750

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13RHSA-2024:10800

Fixed in:0:1.4.8-1.module+el9.4.0+20427+07482b8c.aarch64::postgresql:16RHSA-2024:10593

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13RHSA-2024:10677

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.src::postgresql:12RHSA-2024:10750

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.s390x::postgresql:15RHSA-2024:10830

Fixed in:0:1.4.6-3.module+el8.9.0+19330+c97ddbdf.ppc64le::postgresql:12RHSA-2024:10785

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15RHSA-2024:10736

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.aarch64::postgresql:15RHSA-2024:10787

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.ppc64le::postgresql:15RHSA-2024:10851

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.s390x::postgresql:15RHSA-2024:10807

Fixed in:0:1.5.1-1.module+el9.5.0+22557+8cb08ba5.x86_64::postgresql:16RHSA-2024:10788

Fixed in:0:1.4.8-1.module+el9.4.0+20427+07482b8c.src::postgresql:16RHSA-2024:10593

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.s390x::postgresql:13RHSA-2024:10832

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.aarch64::postgresql:15RHSA-2024:10830

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.src::postgresql:15RHSA-2024:10736

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.x86_64::postgresql:16RHSA-2024:10831

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15RHSA-2024:10736

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.aarch64::postgresql:15RHSA-2024:10807

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.x86_64::postgresql:15RHSA-2024:10830

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13RHSA-2024:10677

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.src::postgresql:15RHSA-2024:10807

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.aarch64::postgresql:15RHSA-2024:10851

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.ppc64le::postgresql:13RHSA-2024:10800

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.src::postgresql:13RHSA-2024:10677

Fixed in:0:1.4.6-3.module+el8.9.0+19330+c97ddbdf.s390x::postgresql:12RHSA-2024:10785

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.s390x::postgresql:13RHSA-2024:10677

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.ppc64le::postgresql:15RHSA-2024:10830

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.src::postgresql:15RHSA-2024:10851

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.s390x::postgresql:16RHSA-2024:10831

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64::postgresql:12RHSA-2024:10750

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12RHSA-2024:10705

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15RHSA-2024:10736

Fixed in:0:1.5.1-1.module+el9.5.0+22557+8cb08ba5.s390x::postgresql:16RHSA-2024:10788

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.ppc64le::postgresql:12RHSA-2024:10750

Fixed in:0:1.5.1-1.module+el9.5.0+22557+8cb08ba5.src::postgresql:16RHSA-2024:10788

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.src::postgresql:13RHSA-2024:10832

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.src::postgresql:12RHSA-2024:10705

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.s390x::postgresql:12RHSA-2024:10750

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.x86_64::postgresql:12RHSA-2024:10705

Fixed in:0:1.5.1-1.module+el9.5.0+22557+8cb08ba5.ppc64le::postgresql:16RHSA-2024:10788

Fixed in:0:1.4.6-3.module+el8.9.0+19330+c97ddbdf.x86_64::postgresql:12RHSA-2024:10785

Fixed in:0:1.4.8-1.module+el9.4.0+20427+07482b8c.s390x::postgresql:16RHSA-2024:10593

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.ppc64le::postgresql:15RHSA-2024:10807

Fixed in:0:1.4.8-1.module+el9.4.0+20427+07482b8c.x86_64::postgresql:16RHSA-2024:10593

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.x86_64::postgresql:13RHSA-2024:10677

Fixed in:0:1.4.8-1.module+el9.4.0+20427+07482b8c.ppc64le::postgresql:16RHSA-2024:10593

Fixed in:0:1.4.8-1.module+el8.9.0+19797+c4ce5969.src::postgresql:15RHSA-2024:10830

Fixed in:0:1.4.8-1.module+el8.8.0+17071+aaaceaa4.x86_64::postgresql:15RHSA-2024:10851

Fixed in:0:1.5.1-1.module+el9.5.0+22557+8cb08ba5.aarch64::postgresql:16RHSA-2024:10788

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.aarch64::postgresql:16RHSA-2024:10831

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.src::postgresql:13RHSA-2024:10800

Fixed in:0:1.4.6-3.module+el8.5.0+11357+bcc62552.aarch64::postgresql:13RHSA-2024:10800

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.ppc64le::postgresql:16RHSA-2024:10831

Fixed in:0:1.5.1-1.module+el8.10.0+22551+c0330dc9.src::postgresql:16RHSA-2024:10831

Fixed in:0:1.4.6-3.module+el8.9.0+20664+9c30cf7f.ppc64le::postgresql:13RHSA-2024:10832

Fixed in:0:1.4.6-3.module+el8.5.0+11354+78b3c9c5.aarch64::postgresql:12RHSA-2024:10705

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.x86_64::postgresql:15RHSA-2024:10787

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.s390x::postgresql:15RHSA-2024:10787

Fixed in:0:1.4.8-1.module+el9.2.0+17405+aeb9ec60.x86_64::postgresql:15RHSA-2024:10807

Fixed in:0:1.4.8-2.module+el9.5.0+22224+f5585c78.ppc64le::postgresql:15RHSA-2024:10787

Fixed in:0:1.4.6-3.module+el8.9.0+19330+c97ddbdf.src::postgresql:12RHSA-2024:10785

pg_repackRed Hat / RHEL