Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2017-7484
HistoryMay 12, 2017 - 7:29 p.m.

CVE-2017-7484

2017-05-1219:29:00
Debian Security Bug Tracker
security-tracker.debian.org
7

0.005 Low

EPSS

Percentile

75.3%

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access.

OSVersionArchitecturePackageVersionFilename
Debian9allpostgresql-9.6< 9.6.17-0+deb9u1postgresql-9.6_9.6.17-0+deb9u1_all.deb