PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.
CVSS Details
- CVSS 3.0 Base Score: 6.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Nov 23, 2017 | Nov 22, 2017 |
| Amazon_linux | — | Upgrade postgresql94Upgrade postgresql92Upgrade postgresql96Upgrade postgresql93Upgrade postgresql95 | Dec 7, 2017 | Nov 22, 2017 |
| Centos_linux | — | Upgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-develUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-upgrade | Dec 12, 2017 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-devel | Jan 18, 2018 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-develUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-server | Jan 18, 2018 | Nov 22, 2017 |
| Oracle_linux | — | Upgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-static | Dec 8, 2017 | Nov 9, 2017 |
| Postgres | — | Upgrade to PostgreSQL version 10.1 | Nov 10, 2017 | Nov 10, 2017 |
| Redhat_linux | — | Upgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresql-testNo solution existsUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-static | Dec 8, 2017 | Nov 22, 2017 |
| Suse | — | Upgrade libpq5Upgrade postgresql94-serverUpgrade libpq5-32bitUpgrade postgresql94-develUpgrade postgresql94-contribUpgrade postgresql94Upgrade postgresql94-docsUpgrade libecpg6 | Jan 15, 2018 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub