UBUNTU-CVE-2018-10925

Source
https://ubuntu.com/security/CVE-2018-10925
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-10925.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-10925
Related
Published
2018-08-09T00:00:00Z
Modified
2018-08-09T00:00:00Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
  • 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ... ON CONFLICT DO UPDATE". An attacker with "CREATE TABLE" privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain "INSERT" and limited "UPDATE" privileges to a particular table, they could exploit this to update other columns in the same table.

References

Affected packages

Ubuntu:16.04:LTS / postgresql-9.5

Package

Name
postgresql-9.5
Purl
pkg:deb/ubuntu/postgresql-9.5?arch=src?distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.5.14-0ubuntu0.16.04

Affected versions

9.*

9.5.0-1
9.5.0-2
9.5.0-3
9.5.1-1
9.5.2-1
9.5.3-0ubuntu0.16.04
9.5.4-0ubuntu0.16.04
9.5.5-0ubuntu0.16.04
9.5.6-0ubuntu0.16.04
9.5.7-0ubuntu0.16.04
9.5.8-0ubuntu0.16.04.1
9.5.9-0ubuntu0.16.04
9.5.10-0ubuntu0.16.04
9.5.11-0ubuntu0.16.04
9.5.12-0ubuntu0.16.04
9.5.13-0ubuntu0.16.04

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libecpg-compat3"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libecpg-compat3-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libecpg-dev"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libecpg-dev-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libecpg6"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libecpg6-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libpgtypes3"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libpgtypes3-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libpq-dev"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libpq-dev-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libpq5"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "libpq5-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-9.5"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-9.5-dbg"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-9.5-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-client-9.5"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-client-9.5-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-contrib-9.5"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-contrib-9.5-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-doc-9.5"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-plperl-9.5"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-plperl-9.5-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-plpython-9.5"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-plpython-9.5-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-plpython3-9.5"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-plpython3-9.5-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-pltcl-9.5"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-pltcl-9.5-dbgsym"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-server-dev-9.5"
        },
        {
            "binary_version": "9.5.14-0ubuntu0.16.04",
            "binary_name": "postgresql-server-dev-9.5-dbgsym"
        }
    ]
}

Ubuntu:18.04:LTS / postgresql-10

Package

Name
postgresql-10
Purl
pkg:deb/ubuntu/postgresql-10?arch=src?distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
10.5-0ubuntu0.18.04

Affected versions

10.*

10.1-1
10.1-2
10.2-1
10.3-1
10.4-0ubuntu0.18.04

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libecpg-compat3"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libecpg-compat3-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libecpg-dev"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libecpg-dev-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libecpg6"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libecpg6-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libpgtypes3"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libpgtypes3-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libpq-dev"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libpq5"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "libpq5-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-10"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-10-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-client-10"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-client-10-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-doc-10"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-plperl-10"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-plperl-10-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-plpython-10"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-plpython-10-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-plpython3-10"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-plpython3-10-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-pltcl-10"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-pltcl-10-dbgsym"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-server-dev-10"
        },
        {
            "binary_version": "10.5-0ubuntu0.18.04",
            "binary_name": "postgresql-server-dev-10-dbgsym"
        }
    ]
}