CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
postgresqlpostgresql
9.3 ≤
𝑥
< 9.3.22
postgresqlpostgresql
9.4 ≤
𝑥
< 9.4.17
postgresqlpostgresql
9.5 ≤
𝑥
< 9.5.12
postgresqlpostgresql
9.6 ≤
𝑥
< 9.6.8
postgresqlpostgresql
10.0 ≤
𝑥
< 10.3
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
17.10
redhatcloudforms
4.6
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
postgresql-10
artful
dne
bionic
Fixed 10.3-1
released
cosmic
Fixed 10.3-1
released
disco
dne
trusty
dne
xenial
dne
postgresql-9.1
artful
dne
bionic
dne
cosmic
dne
disco
dne
trusty
dne
xenial
dne
postgresql-9.3
artful
dne
bionic
dne
cosmic
dne
disco
dne
trusty
Fixed 9.3.22-0ubuntu0.14.04
released
xenial
dne
postgresql-9.5
artful
dne
bionic
dne
cosmic
dne
disco
dne
trusty
dne
xenial
Fixed 9.5.12-0ubuntu0.16.04
released
postgresql-9.6
artful
Fixed 9.6.8-0ubuntu0.17.10
released
bionic
dne
cosmic
dne
disco
dne
trusty
dne
xenial
dne
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libecpg6
suse enterprise sap 12 SP2
9.6.8-3.16.1
fixed
suse enterprise sap 12 SP3
9.6.8-3.16.1
fixed
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.25
fixed
suse enterprise server 12 SP2
9.6.8-3.16.1
fixed
suse enterprise server 12 SP3
9.6.8-3.16.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.25
fixed
libpq5
suse enterprise desktop 15
10.3-2.8
fixed
suse enterprise desktop 15 SP1
10.6-6.25
fixed
suse enterprise sap 12 SP2
9.6.8-3.16.1
fixed
suse enterprise sap 12 SP3
9.6.8-3.16.1
fixed
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.25
fixed
suse enterprise server 12 SP2
9.6.8-3.16.1
fixed
suse enterprise server 12 SP3
9.6.8-3.16.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.25
fixed
libpq5-32bit
suse enterprise sap 12 SP2
9.6.8-3.16.1
fixed
suse enterprise sap 12 SP3
9.6.8-3.16.1
fixed
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise server 12 SP2
9.6.8-3.16.1
fixed
suse enterprise server 12 SP3
9.6.8-3.16.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
postgresql10
suse enterprise desktop 15
10.3-2.8
fixed
suse enterprise desktop 15 SP1
10.6-6.26
fixed
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-contrib
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-devel
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.25
fixed
suse enterprise sap 15 SP2
10.12-8.13.9
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.25
fixed
suse enterprise server 15 SP2
10.12-8.13.9
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-docs
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
postgresql10-plperl
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-plpython
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-pltcl
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql10-server
suse enterprise sap 12 SP5
10.10-1.15.1
fixed
suse enterprise sap 15
10.3-2.8
fixed
suse enterprise sap 15 SP1
10.6-6.26
fixed
suse enterprise sap 15 SP2
10.12-8.13.10
fixed
suse enterprise sap 15 SP3
10.16-8.29.1
fixed
suse enterprise server 12 SP5
10.10-1.15.1
fixed
suse enterprise server 15
10.3-2.8
fixed
suse enterprise server 15 SP1
10.6-6.26
fixed
suse enterprise server 15 SP2
10.12-8.13.10
fixed
suse enterprise server 15 SP3
10.16-8.29.1
fixed
postgresql94
suse enterprise sap 12 SP2
9.4.17-21.19.1
fixed
suse enterprise server 12 SP2
9.4.17-21.19.1
fixed
postgresql94-contrib
suse enterprise sap 12 SP2
9.4.17-21.19.1
fixed
suse enterprise server 12 SP2
9.4.17-21.19.1
fixed
postgresql94-docs
suse enterprise sap 12 SP2
9.4.17-21.19.1
fixed
suse enterprise server 12 SP2
9.4.17-21.19.1
fixed
postgresql94-server
suse enterprise sap 12 SP2
9.4.17-21.19.1
fixed
suse enterprise server 12 SP2
9.4.17-21.19.1
fixed
postgresql96
suse enterprise sap 12 SP2
9.6.8-3.16.1
fixed
suse enterprise sap 12 SP3
9.6.8-3.16.1
fixed
suse enterprise server 12 SP2
9.6.8-3.16.1
fixed
suse enterprise server 12 SP3
9.6.8-3.16.1
fixed
postgresql96-contrib
suse enterprise sap 12 SP2
9.6.8-3.16.1
fixed
suse enterprise sap 12 SP3
9.6.8-3.16.1
fixed
suse enterprise server 12 SP2
9.6.8-3.16.1
fixed
suse enterprise server 12 SP3
9.6.8-3.16.1
fixed
postgresql96-docs
suse enterprise sap 12 SP2
9.6.8-3.16.1
fixed
suse enterprise sap 12 SP3
9.6.8-3.16.1
fixed
suse enterprise server 12 SP2
9.6.8-3.16.1
fixed
suse enterprise server 12 SP3
9.6.8-3.16.1
fixed
postgresql96-server
suse enterprise sap 12 SP2
9.6.8-3.16.1
fixed
suse enterprise sap 12 SP3
9.6.8-3.16.1
fixed
suse enterprise server 12 SP2
9.6.8-3.16.1
fixed
suse enterprise server 12 SP3
9.6.8-3.16.1
fixed
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/103221
https://access.redhat.com/errata/RHSA-2018:2511
https://access.redhat.com/errata/RHSA-2018:2566
https://access.redhat.com/errata/RHSA-2018:3816
https://bugzilla.redhat.com/show_bug.cgi?id=1547044
https://usn.ubuntu.com/3589-1/
https://www.postgresql.org/about/news/1834/
http://www.securityfocus.com/bid/103221
https://access.redhat.com/errata/RHSA-2018:2511
https://access.redhat.com/errata/RHSA-2018:2566
https://access.redhat.com/errata/RHSA-2018:3816
https://bugzilla.redhat.com/show_bug.cgi?id=1547044
https://usn.ubuntu.com/3589-1/
https://www.postgresql.org/about/news/1834/