VDB

ALPINE-CVE-2018-1052

ALPINE-CVE-2018-1052 PUBLISHED CVSS 6.5 MEDIUM

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table.

Risk Scores

CVSS 3.0
6.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Alpine:v3.18postgresql150, 0, 0
Alpine:v3.16postgresql149.5.2-r4, 9.5.2-r3, 9.5.2-r2
Alpine:v3.15postgresql149.1.2-r1, 9.5.2-r4, 9.5.2-r3
Alpine:v3.19postgresql150, 0, 0
Alpine:v3.17postgresql149.0.1-r0, 9.0.2-r0, 9.0.3-r1
Alpine:v3.18postgresql149.6.0-r1, 0, 10.0-r0
Alpine:v3.9postgresql9.6.5-r1, 9.6.5-r0, 9.6.4-r1
Alpine:v3.11postgresql10.1-r2, 9.6.5-r1, 9.6.5-r0
Alpine:v3.20postgresql150, 0, 0
Alpine:v3.8postgresql9.6.5-r0, 8.4.2-r1, 8.4.3-r0
Alpine:v3.7postgresql9.6.5-r1, 9.6.5-r0, 9.6.4-r1
Alpine:v3.13postgresql9.5.2-r1, 10.0-r0, 10.0-r1
Alpine:v3.12postgresql8.4.3-r0, 9.6.5-r1, 9.6.5-r0
Alpine:v3.17postgresql150, 0, 0
Alpine:v3.10postgresql9.2.0-r0, 9.2.0-r1, 9.2.1-r0
Alpine:v3.14postgresql9.0.3-r0, 9.5.3-r1, 9.5.4-r0

Timeline

  • Feb 9, 2018 CVE Published
  • Nov 19, 2025 CVE Updated
  • Apr 30, 2026 Distribution Patch
Open in Interactive Console →
$ Console Community · 100/wk Open console ›