Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-pltcl | Dec 12, 2017 | Dec 8, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade postgresql-testUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-docs | Oct 11, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-devel | Oct 11, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-server | Dec 8, 2017 | Dec 7, 2017 |
| Redhat_linux | — | Upgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-staticUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-testNo solution existsUpgrade postgresql-upgrade | Dec 8, 2017 | Dec 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub