#VU18862 Buffer overflow in PostgreSQL - CVE-2019-10164

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU18862

#VU18862 Buffer overflow in PostgreSQL - CVE-2019-10164

Published: June 20, 2019


Vulnerability identifier: #VU18862
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2019-10164
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
PostgreSQL
Software vendor:
PostgreSQL Global Development Group

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing a specifically crafted message during the SCRAM authentication process in a libpq-enabled client. A remote attacker can trick the victim to connect to a malicious PostgreSQL server, trigger memory corruption and execute arbitrary code on the target client system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation

Install updates from vendor's website.

External links