CVE-2018-16850
13.11.2018, 15:29
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.
| Vendor | Product | Version |
|---|---|---|
| postgresql | postgresql | 10.0 ≤ 𝑥 < 10.6 |
| postgresql | postgresql | 11.0 ≤ 𝑥 < 11.1 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 7.4 |
| redhat | enterprise_linux | 7.5 |
| redhat | enterprise_linux | 7.6 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 18.10 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| postgresql-10 |
| ||||||||
| postgresql-9.1 |
| ||||||||
| postgresql-9.3 |
| ||||||||
| postgresql-9.5 |
|
References