PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database su…
Medium CVSS 6.7
Summary
PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations u…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- http://www.securityfocus.com/bid/101949 Third Party Advisory
- http://www.securitytracker.com/id/1039752 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3402 Issue Tracking
- https://access.redhat.com/errata/RHSA-2017:3403 Issue Tracking
- https://access.redhat.com/errata/RHSA-2017:3404 Issue Tracking
- https://access.redhat.com/errata/RHSA-2017:3405 Issue Tracking
- https://www.postgresql.org/about/news/1801/ Issue Tracking
- https://www.postgresql.org/support/security/ Issue Tracking
- http://www.securityfocus.com/bid/101949 Third Party Advisory
- http://www.securitytracker.com/id/1039752 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3402 Issue Tracking
- https://access.redhat.com/errata/RHSA-2017:3403 Issue Tracking
- https://access.redhat.com/errata/RHSA-2017:3404 Issue Tracking
- https://access.redhat.com/errata/RHSA-2017:3405 Issue Tracking
- https://www.postgresql.org/about/news/1801/ Issue Tracking
- https://www.postgresql.org/support/security/ Issue Tracking
Timeline
- nvd_ingest NVD