Untrusted search path in PostgreSQL - CVE-2019-10211
Published: August 8, 2019
Vulnerability identifier: #VU20006
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-10211
CWE-ID: CWE-426
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to EnterpriseDB Windows installer bundles an OpenSSL library that tries to load configuration from a hard-coded location on the system. This location usually does not exists, therefore an attacker can create a folder, place malicious configuration file in it and execute the configuration.
Affected software
PostgreSQL
Opensuse
Fedora
postgresql
libpq
Dell Security Management Server
Opensuse
Fedora
postgresql
libpq
Dell Security Management Server
How to mitigate CVE-2019-10211
Install updates from vendor's website.
PostgreSQL - addressed in versions 9.4.24, 9.5.19, 9.6.15, 10.10, 11.5
postgresql - addressed in versions 10.10-1.fc29, 11.5-1.fc30
Dell Security Management Server - update to 11.0.1
libpq - update to 11.5-1.fc30
postgresql - addressed in versions 10.10-1.fc29, 11.5-1.fc30
Dell Security Management Server - update to 11.0.1
libpq - update to 11.5-1.fc30