Multiple vulnerabilities in PostgreSQL

Descripción

Multiple serious vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An unspecified vulnerability in libpq can be exploited remotely to bypass security restrictions;
2. An unspecified vulnerability can be exploited remotely to obtain sensitive information.

---

Technical details

Attacker with “CREATE TABLE” privileges can exploit this to read arbitrary bytes server memory. If the attacker also have “INSERT” and “UPDATE” privileges to a particular table, the can exploit this to update other columns in this table

Notas informativas originales

• POSTGRESQL 10.5, 9.6.10, 9.5.14, 9.4.19, 9.3.24, AND 11 BETA 3 RELEASED!

Productos relacionados

• PostgreSQL

Lista CVE

• CVE-2018-10915
  high
• CVE-2018-10925
  high

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com