Privilege escalation in PostgreSQL - CVE-2018-1058

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU10810

Privilege escalation in PostgreSQL - CVE-2018-1058

Published: March 2, 2018 / Updated: March 2, 2018


Vulnerability identifier: #VU10810
CSH Severity: Low
CVSS v4: 9.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H]
CVE-ID: CVE-2018-1058
CWE-ID: CWE-427
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists in the pg_dump function due to improper security restrictions. A local attacker can submit a malicious function in separate namespaces and execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in system compromise.

Affected software

PostgreSQL
Amazon Linux AMI
Arch Linux
Red Hat Enterprise Linux for x86_64
openEuler
Red Hat Virtualization Manager
CloudForms
postgresql (Alpine package)
postgresql
postgresql-contrib
postgresql-debuginfo
postgresql-debugsource
postgresql-devel
postgresql-help
postgresql-libs
postgresql-plperl
postgresql-plpython3
postgresql-pltcl
postgresql-server
postgresql-static
postgresql-test
postgresql-test-rpm-macros

How to mitigate CVE-2018-1058

Update to version 10.3.

postgresql (Alpine package) - update to 9.5.12-r0
postgresql - update to 10.5-18
postgresql-contrib - update to 10.5-18
postgresql-debuginfo - update to 10.5-18
postgresql-debugsource - update to 10.5-18
postgresql-devel - update to 10.5-18
postgresql-help - update to 10.5-18
postgresql-libs - update to 10.5-18
postgresql-plperl - update to 10.5-18
postgresql-plpython3 - update to 10.5-18
postgresql-pltcl - update to 10.5-18
postgresql-server - update to 10.5-18
postgresql-static - update to 10.5-18
postgresql-test - update to 10.5-18
postgresql-test-rpm-macros - update to 10.5-18

External References

Related Security Bulletins