| Severity | Low |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE ID | CVE-2017-15099 CVE-2017-15098 CVE-2017-12172 |
| CVSSv3 |
6.4 [CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C] 5.7 [CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C] 2.9 [CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C] |
| CWE ID | CWE-264 CWE-19 |
| Exploitation vector | Network |
| Public exploit | Not available |
| Vulnerable software |
PostgreSQL |
| Vulnerable software versions |
PostgreSQL 9.6.5 PostgreSQL 9.6.4 PostgreSQL 9.6.3 Show more |
| Vendor URL | PostgreSQL Global Development Group |
The vulnerability allows a remote attacker to bypass security restrictions on a targeted system.
The weakness exists due to improper security restrictions in the case of an arbiter specified by constraint name. A remote attacker can submit specially crafted INSERT requests and bypass security controls on the update path of 'INSERT ... ON CONFLICT DO UPDATE' function to conduct further attacks.
Update to version 9.6.6.
https://www.postgresql.org/docs/current/static/release-9-6-6.html
The vulnerability allows a remote authenticated attacker to cause DoS condition or obtain potentially sensitive information on a targeted system.
The weakness exists due to improper data handling. A remote attacker can send specially crafted data to trigger a rowtype mismatch in json{b}_populate_recordset(), cause the application to crash or read arbitrary data.
Update to version 9.6.6.
https://www.postgresql.org/docs/current/static/release-9-6-6.html
The vulnerability allows a local attacker to cause DoS condition or obtain potentially sensitive information on a targeted system.
The weakness exists due to a flaw in certain non-default startup scripts. A local attacker with the privileges of the database server can create a symbolic link from the $PGLOG file to a critical file and modify the target file.
Update to version 9.6.6.
https://www.postgresql.org/docs/current/static/release-9-6-6.html