CVE-2018-1052

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
postgresqlpostgresql
10.0
postgresqlpostgresql
10.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
postgresql-10
artful
dne
trusty
dne
xenial
dne
postgresql-9.1
artful
dne
trusty
dne
xenial
dne
postgresql-9.4
artful
dne
trusty
dne
xenial
dne
postgresql-9.6
artful
not-affected
trusty
dne
xenial
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libecpg6
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.25
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.25
fixed
libpq5
suse enterprise desktop 15
10.3-2.8
fixed
suse enterprise desktop 15 SP1
10.6-6.25
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.25
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.25
fixed
postgresql10
suse enterprise desktop 15
10.3-2.8
fixed
suse enterprise desktop 15 SP1
10.6-6.26
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-contrib
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-devel
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.25
fixed
suse enterprise sap 15 SP2
10.12-8.13.9
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.25
fixed
suse enterprise server 15 SP2
10.12-8.13.9
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-docs
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
postgresql10-plperl
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-plpython
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-pltcl
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-server
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/102987
https://www.postgresql.org/about/news/1829/
http://www.securityfocus.com/bid/102987
https://www.postgresql.org/about/news/1829/