説明
Multiple serious vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions and obtain sensitive information.
Below is a complete list of vulnerabilities:
- An unspecified vulnerability in libpq can be exploited remotely to bypass security restrictions;
- An unspecified vulnerability can be exploited remotely to obtain sensitive information.
Technical details
Attacker with “CREATE TABLE” privileges can exploit this to read arbitrary bytes server memory. If the attacker also have “INSERT” and “UPDATE” privileges to a particular table, the can exploit this to update other columns in this table
オリジナルアドバイザリー
エクスプロイテーション
Public exploits exist for this vulnerability.
関連製品
CVEリスト
- CVE-2018-10915 critical
- CVE-2018-10925 critical
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！