Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-develUpgrade postgresql-upgradeUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-server | Dec 12, 2017 | Dec 8, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-pltcl | Oct 11, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-docsUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-plpython | Oct 11, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-static | Dec 8, 2017 | Dec 7, 2017 |
| Redhat_linux | — | Upgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-upgradeUpgrade postgresql-testNo solution existsUpgrade postgresql-plpythonUpgrade postgresql-debuginfo | Dec 8, 2017 | Dec 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub