Lucene search
PRIOn knowledge basePRION:CVE-2018-1115HistoryMay 10, 2018 - 7:29 p.m.
Authentication flaw
2018-05-1019:29:00
PRIOn knowledge base
www.prio-n.com
12
postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn’t follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| leap | eq | 15.1 | |
| postgresql | ge | 10.0 | |
| postgresql | lt | 10.4 | |
| postgresql | lt | 9.6.9 |
References
lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html
www.securityfocus.com/bid/104285
access.redhat.com/errata/RHSA-2018:2565
access.redhat.com/errata/RHSA-2018:2566
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1115
git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=7b34740
security.gentoo.org/glsa/201810-08
Related
openvas
openvas
PostgreSQL logrotate Vulnerability (May 2018) - Windows
2018-05-11 00:00:00
Fedora Update for postgresql FEDORA-2018-08550a9006
2018-05-16 00:00:00
PostgreSQL logrotate Vulnerability (May 2018) - Linux
2018-05-11 00:00:00
nessus
nessus
PostgreSQL 9.3 < 9.3.23 / 9.4 < 9.4.18 / 9.5 < 9.5.13 / 9.6 < 9.6.9 / 10.3 Insecure ACL Remote Issue
2018-06-01 00:00:00
Fedora 28 : postgresql (2018-08550a9006)
2019-01-03 00:00:00
Fedora 26 : postgresql (2018-bd6f9237b5)
2018-05-23 00:00:00
ubuntucve
ubuntucve
CVE-2018-1115
2018-05-10 00:00:00
osv
osv
CVE-2018-1115
2018-05-10 19:29:00
suse
suse
Security update for postgresql96 (moderate)
2018-06-16 00:07:53
Recommended update for postgresql95 (moderate)
2018-07-06 00:11:08
Security update for postgresql10 (moderate)
2018-09-04 12:08:24
altlinux
altlinux
kaspersky
kaspersky
KLA11263 DoS vulnerability in PostgreSQL
2018-05-10 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: postgresql-10.4-1.fc28
2018-05-12 18:23:18
[SECURITY] Fedora 26 Update: postgresql-9.6.9-1.fc26
2018-05-21 14:01:30
[SECURITY] Fedora 27 Update: postgresql-9.6.9-1.fc27
2018-05-21 14:20:53
redhatcve
redhatcve
CVE-2018-1115
2020-03-12 13:20:24
cvelist
cvelist
CVE-2018-1115
2018-05-10 19:00:00
debiancve
debiancve
CVE-2018-1115
2018-05-10 19:29:00
postgresql
postgresql
Vulnerability in contrib module (CVE-2018-1115)
2018-05-10 19:29:00
veracode
veracode
Insecure Access Controls
2019-05-16 03:24:05
alpinelinux
alpinelinux
CVE-2018-1115
2018-05-10 19:29:00
nvd
nvd
CVE-2018-1115
2018-05-10 19:29:00
cve
cve
CVE-2018-1115
2018-05-10 19:29:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2018-10-30 00:00:00
amazon
amazon
Important: postgresql96
2018-12-06 16:58:00
redhat
redhat
(RHSA-2018:2565) Important: rh-postgresql10-postgresql security update
2018-08-27 07:54:02
(RHSA-2018:2566) Important: rh-postgresql96-postgresql security update
2018-08-27 07:54:53
mageia
mageia
Updated postgresql9.4|6 packages fix security vulnerabilities
2018-11-16 01:04:32
rosalinux
rosalinux
Advisory ROSA-SA-2021-1955
2021-07-02 17:59:52