CVEvulnerability

CVE-2018-10925

8.1 HIGH Published 2018-08-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-08-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 3.0 ([email protected])
7.1 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS 2.0 ([email protected])
5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
Weaknesses
CWE-863

Description

It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ... ON CONFLICT DO UPDATE". An attacker with "CREATE TABLE" privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain "INSERT" and limited "UPDATE" privileges to a particular table, they could exploit this to update other columns in the same table.

Affected configurations

• canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • debian debian linux 9.0 • postgresql postgresql (>= 9.5.0 < 9.5.14) • postgresql postgresql (>= 9.6.0 < 9.6.10) • postgresql postgresql (>= 10.0 < 10.5)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References