USN-3744-1

Dashboard / Vulnerabilities / USN-3744-1

USN-3744-1

Summary: postgresql-10, postgresql-9.3, postgresql-9.5 vulnerabilities

Details: Andrew Krasichkov discovered that the PostgreSQL client library incorrectly reset its internal state between connections. A remote attacker could possibly use this issue to bypass certain client-side connection security features. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-10915) It was discovered that PostgreSQL incorrectly checked authorization on certain statements. A remote attacker could possibly use this issue to read arbitrary server memory or alter certain data. (CVE-2018-10925)

References: https://ubuntu.com/security/notices/USN-3744-1, https://ubuntu.com/security/CVE-2018-10915, https://ubuntu.com/security/CVE-2018-10925