CVE-2018-1058 : A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker wit

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Published 2018-03-02 15:29:00

Updated 2023-01-19 20:11:35

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationExecute code

Products affected by CVE-2018-1058

Redhat » Cloudforms » Version: 4.6
cpe:2.3:a:redhat:cloudforms:4.6:*:*:*:*:*:*:*
Matching versions
Postgresql » Postgresql
Versions from including (>=) 9.6 and before (<) 9.6.8
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
Matching versions
Postgresql » Postgresql
Versions from including (>=) 9.5 and before (<) 9.5.12
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
Matching versions
Postgresql » Postgresql
Versions from including (>=) 10.0 and before (<) 10.3
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
Matching versions
Postgresql » Postgresql
Versions from including (>=) 9.4 and before (<) 9.4.17
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
Matching versions
Postgresql » Postgresql
Versions from including (>=) 9.3 and before (<) 9.3.22
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 14.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 16.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 17.10
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2018-1058

Top countries where our scanners detected CVE-2018-1058

Top open port discovered on systems with this issue 5432

IPs affected by CVE-2018-1058 186,799

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2018-1058!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2018-1058

EPSS FAQ

0.48%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 73 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-1058

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P	8.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-1058

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: secalert@redhat.com (Secondary)

References for CVE-2018-1058

https://www.postgresql.org/about/news/1834/

PostgreSQL: PostgreSQL 10.3, 9.6.8, 9.5.12, 9.4.17, and 9.3.22 released!
Vendor Advisory
https://access.redhat.com/errata/RHSA-2018:3816

RHSA-2018:3816 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2018:2511

RHSA-2018:2511 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/103221

PostgreSQL CVE-2018-1058 Remote Code Execution Vulnerability
Third Party Advisory;VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1547044

1547044 – (CVE-2018-1058) CVE-2018-1058 postgresql: Uncontrolled search path element in pg_dump and other client applications
Issue Tracking;Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2566

RHSA-2018:2566 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://usn.ubuntu.com/3589-1/

USN-3589-1: PostgreSQL vulnerability | Ubuntu security notices
Third Party Advisory