PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.
CVSS Details
- CVSS 3.0 Base Score: 6.7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Nov 23, 2017 | Nov 22, 2017 |
| Amazon_linux | — | Upgrade postgresql96Upgrade postgresql95Upgrade postgresql92Upgrade postgresql93Upgrade postgresql94 | Dec 7, 2017 | Nov 22, 2017 |
| Centos_linux | — | Upgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-server | Dec 12, 2017 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-pltcl | Jan 18, 2018 | Nov 22, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-develUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-server | Jan 18, 2018 | Nov 22, 2017 |
| Oracle_linux | — | Upgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-contrib | Dec 8, 2017 | Nov 9, 2017 |
| Postgres | — | Upgrade to PostgreSQL version 10.1 | Nov 10, 2017 | Nov 10, 2017 |
| Redhat_linux | — | Upgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresqlNo solution existsUpgrade postgresql-staticUpgrade postgresql-test | Dec 8, 2017 | Nov 22, 2017 |
| Suse | — | Upgrade libpq5Upgrade postgresql94-serverUpgrade libpq5-32bitUpgrade postgresql94-develUpgrade libecpg6Upgrade postgresql94-contribUpgrade postgresql94Upgrade postgresql94-docs | Jan 15, 2018 | Nov 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub