Multiple vulnerabilities in PostgreSQL

Published: 2017-11-10 12:29:24
Severity Low
Patch available YES
Number of vulnerabilities 3
CVSSv2 5.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
4.7 (AV:N/AC:L/Au:N/C:P/I:N/A:P/E:U/RL:OF/RC:C)
1.6 (AV:L/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
CVSSv3 6.3 [CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]
5.5 [CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]
2.8 [CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C]
CVE ID CVE-2017-15099
CVE-2017-15098
CVE-2017-12172
CWE ID CWE-264
CWE-19
Exploitation vector Network
Public exploit Not available
Vulnerable software PostgreSQL
Vulnerable software versions PostgreSQL 9.6.5
PostgreSQL 9.6.4
PostgreSQL 9.6.3
Show more
Vendor URL PostgreSQL Global Development Group
Advisory type Public

Security Advisory

1) Security restrictions bypass

Description

The vulnerability allows a remote attacker to bypass security restrictions on a targeted system.

The weakness exists due to improper security restrictions in the case of an arbiter specified by constraint name. A remote attacker can submit specially crafted INSERT requests and bypass security controls on the update path of 'INSERT ... ON CONFLICT DO UPDATE' function to conduct further attacks.

Remediation

Update to version 9.6.6.

External links

https://www.postgresql.org/docs/current/static/release-9-6-6.html

2) Data handling

Description

The vulnerability allows a remote authenticated attacker to cause DoS condition or obtain potentially sensitive information on a targeted system.

The weakness exists due to improper data handling. A remote attacker can send specially crafted data to trigger a rowtype mismatch in json{b}_populate_recordset(), cause the application to crash or read arbitrary data.

Remediation

Update to version 9.6.6.

External links

https://www.postgresql.org/docs/current/static/release-9-6-6.html

3) Improper access control

Description

The vulnerability allows a local attacker to cause DoS condition or obtain potentially sensitive information on a targeted system.

The weakness exists due to a flaw in certain non-default startup scripts. A local attacker with the privileges of the database server can create a symbolic link from the $PGLOG file to a critical file and modify the target file.

Remediation

Update to version 9.6.6.

External links

https://www.postgresql.org/docs/current/static/release-9-6-6.html

Back to List