Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-static | Dec 12, 2017 | Dec 8, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-libs | Oct 11, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-libs | Oct 11, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade postgresql-plpythonUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-upgrade | Dec 8, 2017 | Dec 7, 2017 |
| Redhat_linux | — | Upgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-plpythonNo solution existsUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-static | Dec 8, 2017 | Dec 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub