Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql15Upgrade postgresql | Aug 22, 2024 | Feb 9, 2018 |
| Freebsd | — | Upgrade postgresql95-serverUpgrade postgresql96-serverUpgrade postgresql94-serverUpgrade postgresql10-serverUpgrade postgresql93-server | Feb 9, 2018 | Feb 8, 2018 |
| Postgres | — | Upgrade to PostgreSQL version 10.2 | Feb 9, 2018 | Feb 9, 2018 |
| Suse | — | Upgrade postgresql10-plperlUpgrade postgresql10Upgrade libecpg6Upgrade libpq5Upgrade postgresql10-serverUpgrade postgresql10-plpythonUpgrade postgresql10-contribUpgrade postgresql10-develUpgrade postgresql10-docsUpgrade postgresql10-pltcl | May 20, 2018 | Feb 5, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub