ALPINE-CVE-2018-1058 PUBLISHED CVSS 8.800000190734863 HIGH

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Risk Scores

CVSS v3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.12postgresql9.4.1-r0, 9.1.1-r1, 9.1.3-r0
Alpine:v3.5postgresql9.1.2-r1, 9.6.7-r0, 9.6.6-r0
Alpine:v3.10postgresql10.0-r0, 8.4.3-r0, 8.4.2-r1
Alpine:v3.17postgresql150, 0, 0
Alpine:v3.6postgresql9.6.2-r1, 9.6.7-r0, 9.6.6-r0
Alpine:v3.13postgresql9.4.1-r0, 9.4.1-r1, 9.4.1-r2
Alpine:v3.7postgresql9.6.2-r2, 9.6.5-r1, 9.6.5-r0
Alpine:v3.20postgresql150, 0, 0
Alpine:v3.11postgresql8.4.3-r0, 8.4.2-r1, 8.4.2-r0
Alpine:v3.8postgresql9.3.3-r0, 0, 10.0-r0
Alpine:v3.4postgresql9.3.4-r1, 9.5.8-r0, 9.5.7-r0
Alpine:v3.9postgresql8.4.3-r1, 10.0-r0, 10.1-r0
Alpine:v3.15postgresql149.0.3-r1, 9.1.0-r0, 9.1.0-r1
Alpine:v3.18postgresql150, 0, 0
Alpine:v3.18postgresql148.3.5-r0, 9.4.5-r1, 9.5.0-r0
Alpine:v3.16postgresql149.3.4-r0, 9.3.5-r1, 9.4.1-r0
Alpine:v3.14postgresql10.1-r1, 9.6.2-r3, 9.6.2-r2
Alpine:v3.19postgresql150, 0, 0
Alpine:v3.17postgresql149.3.3-r2, 9.3.4-r0, 9.3.4-r1

Timeline

References

Open in Interactive Console →