Security restrictions bypass in PostgreSQL - CVE-2017-15099

Vulnerability identifier: #VU9167

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-15099

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass security restrictions on a targeted system.

The weakness exists due to improper security restrictions in the case of an arbiter specified by constraint name. A remote attacker can submit specially crafted INSERT requests and bypass security controls on the update path of 'INSERT ... ON CONFLICT DO UPDATE' function to conduct further attacks.

PostgreSQL
Arch Linux
Debian Linux
Amazon Linux AMI
Red Hat Enterprise Linux for x86_64
Ubuntu
Opensuse
Red Hat Virtualization Manager
postgresql (Alpine package)

Update to version 9.6.6.

postgresql (Alpine package) - update to 9.5.10-r0

• https://www.postgresql.org/docs/current/static/release-9-6-6.html

• Debian update for postgresql-9.6
• Multiple vulnerabilities in PostgreSQL
• Arch Linux update for postgresql
• Arch Linux update for postgresql-old-upgrade
• Ubuntu update for PostgreSQL
• Amazon Linux AMI update for postgresql95, postgresql96
• openSUSE update for postgresql95
• Red Hat update for PostgreSQL
• Red Hat update for PostgreSQL
• Security restrictions bypass in postgresql (Alpine package)