ALT-PU-2018-1356-1
Package postgresql9.4 updated to version 9.4.17-alt0.M70P.1 for branch t7 in task 201292.
Closed vulnerabilities
Published: 2018-03-01
BDU:2019-01829
Уязвимость системы управления базами данных PostgreSQL, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код
Severity: HIGH (8.8)
Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2018-03-02
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2018-1058
A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.
Severity: HIGH (8.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
- 103221
- 103221
- RHSA-2018:2511
- RHSA-2018:2511
- RHSA-2018:2566
- RHSA-2018:2566
- RHSA-2018:3816
- RHSA-2018:3816
- https://bugzilla.redhat.com/show_bug.cgi?id=1547044
- https://bugzilla.redhat.com/show_bug.cgi?id=1547044
- USN-3589-1
- USN-3589-1
- https://www.postgresql.org/about/news/1834/
- https://www.postgresql.org/about/news/1834/