CVE-2019-10129
Medium
Description
A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbitrary bytes of server memory. In the default configuration, any user can create a partitioned table suitable for this attack. (Exploit prerequisites are the same as for CVE-2018-1052).
SeverityMedium
CVSS6.5
Exploit probability—
Product
Postgresql
PublishedJul 30, 2019
First seenJul 30, 2019
Weakness typeCWE-125Out-of-bounds read
How to fix
Update
- postgresql postgresql11.3 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postgresql postgresql | 11.0 ≤ v < 11.3 | 11.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.