projects / pgpool2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7b2338e) | patch
Abort SSL negotiation if backend sends an error message.
authorTatsuo Ishii <ishii@postgresql.org>
Mon, 18 Nov 2024 06:40:53 +0000 (15:40 +0900)
committerTatsuo Ishii <ishii@postgresql.org>
Tue, 26 Nov 2024 13:03:29 +0000 (22:03 +0900)
commite004a213e48ccf607706ca8731780ac4c4cd9e00
tree9075e2ac3879663c10a08fd1ecd9e3dfd350d2e3tree
parent7b2338e325d177cb51e5783a2573976d6c0b08b9commit | diff
Abort SSL negotiation if backend sends an error message.

In the client side implementation of SSL negotiation
(pool_ssl_negotiate_clientserver()), it was possible for a
man-in-the-middle attacker to send a long error message to confuse
Pgpool-II or client while in the SSL negotiation phase. This commit
rejects the negotiation immediately (issue a FATAL error) and exits
the session to prevent such an attack.

This resembles PostgreSQL's CVE-2024-10977.
Backpatch-through: v4.1
src/utils/pool_ssl.c diff | blob | blame | history
Clustering tool for PostgreSQL