KLA11506 Buffer overflow vulnerability in PostgreSQL

Buffer overflow vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability via special payload during password changing process to cause denial of service.

Original advisories

PostgreSQL 11.4, 10.9, 9.6.14, 9.5.18, 9.4.23, and 12 Beta 2 Released

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

PostgreSQL

CVE list

CVE-2019-10164 critical

Solution

Update to the latest version

Download PostgreSQL

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• PostgreSQL 10.x earlier than 10.9PostgreSQL 11.x earlier than 11.4PostgreSQL 12.x earlier than 12 Beta 2