7.5
Élevée
CVE-2019-10164 PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow
Description
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| postgresql | 11.4 | Pas de correctif indiqué |
| postgresql | 10.9 | Pas de correctif indiqué |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- www.postgresql.org www.postgresql.org
- openSUSE-SU-2019:1773 lists.opensuse.org
- FEDORA-2019-9f04a701c0 lists.fedoraproject.org
- FEDORA-2019-e43f49b428 lists.fedoraproject.org
- GLSA-202003-03 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de postgresql
Les 11 CVE de postgresql →
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change…
8.8
Élevée
CVE-2024-7348
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary…
8.8
Élevée
CVE-2024-24213
Supabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the component…
9.8
Critique
CVE-2019-10211
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL…
7.8
Élevée