Multiple vulnerabilities in PostgreSQL

Описание

Multiple serious vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An unspecified vulnerability in libpq can be exploited remotely to bypass security restrictions;
2. An unspecified vulnerability can be exploited remotely to obtain sensitive information.

---

Technical details

Attacker with «CREATE TABLE» privileges can exploit this to read arbitrary bytes server memory. If the attacker also have «INSERT» and «UPDATE» privileges to a particular table, the can exploit this to update other columns in this table

Первичный источник обнаружения

• POSTGRESQL 10.5, 9.6.10, 9.5.14, 9.4.19, 9.3.24, AND 11 BETA 3 RELEASED!
  

Связанные продукты

• PostgreSQL

Список CVE

• CVE-2018-10915
  high
• CVE-2018-10925
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com