It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ... ON CONFLICT DO UPDATE". An attacker with "CREATE TABLE" privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain "INSERT" and limited "UPDATE" privileges to a particular table, they could exploit this to update other columns in the same table.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
- CVSS 3.0 Base Score: 7.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresqlUpgrade postgresql15 | Aug 22, 2024 | Aug 9, 2018 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql95Upgrade postgresql96Upgrade postgresql94Upgrade postgresql93 | Sep 7, 2018 | Aug 9, 2018 |
| Debian | — | Upgrade postgresql-9.6 | Aug 12, 2018 | Aug 9, 2018 |
| Freebsd | — | Upgrade postgresql95-serverUpgrade postgresql96-serverUpgrade postgresql10-serverUpgrade postgresql94-serverUpgrade postgresql93-server | Aug 11, 2018 | Aug 10, 2018 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 31, 2018 | Aug 9, 2018 |
| Postgres | — | Upgrade to PostgreSQL version 10.5 | Jan 7, 2019 | Aug 9, 2018 |
| Suse | — | Upgrade postgresql12-testUpgrade postgresql12-server-develUpgrade postgresql10-testUpgrade postgresql96-testUpgrade postgresql96-docsUpgrade libpq5Upgrade postgresql10-plpythonUpgrade postgresql96-serverUpgrade postgresql96-develUpgrade postgresql-serverUpgrade postgresql12-llvmjitUpgrade postgresql12-plpythonUpgrade postgresql10-pltclUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql12-develUpgrade postgresql-testUpgrade postgresql96-plpythonUpgrade postgresql12-contribUpgrade postgresql10-plperlUpgrade postgresql12-pltclUpgrade postgresql-docsUpgrade postgresql96-plperlUpgrade postgresql12-plperlUpgrade postgresql96-contribUpgrade postgresql12Upgrade postgresql-llvmjitUpgrade postgresql96-pltclUpgrade postgresql12-serverUpgrade postgresql10-docsUpgrade postgresql10-develUpgrade postgresql10-contribUpgrade postgresql-server-develUpgrade postgresql-pltclUpgrade postgresql96Upgrade postgresql-contribUpgrade libecpg6-32bitUpgrade postgresql10-serverUpgrade postgresql12-docsUpgrade libpq5-32bitUpgrade postgresql10Upgrade postgresql-plpythonUpgrade libecpg6Upgrade postgresql-devel | Sep 5, 2018 | Aug 9, 2018 |
| Ubuntu | — | Upgrade postgresql-9.3Upgrade postgresql-9.5Upgrade postgresql-10 | Aug 23, 2018 | Aug 9, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub