CVE-2019-10164
High
Description
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Postgresql
PublishedJun 26, 2019
First seenJun 26, 2019
Weakness typeCWE-121CWE-121
How to fix
Update
- postgresql postgresql10.9, 11.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postgresql postgresql | 10.0 ≤ v < 10.9, 11.0 ≤ v < 11.4 | 10.9, 11.4 |
| redhat enterprise_linux | 8.0 | — |
| fedoraproject fedora | 29, 30 | — |
| opensuse leap | 15.0, 15.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.