Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing
    an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a
    partitioned table. (CVE-2018-1052)

  - In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x
    before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_dumpall -g`
    under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally
    used for other temporary files. This can allow an authenticated attacker to read or modify the one file,
    which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory
    mode blocks the attacker searching the current working directory or if the prevailing umask blocks the
    attacker opening the file. (CVE-2018-1053)

An update of the postgresql package has been released.

The version of PostgreSQL installed on the remote host is 9.3.x prior to 9.3.21, 9.4.x prior to 9.4.16, 9.5.x prior to 9.5.11, 9.6.x prior to 9.6.7, or 10.x prior to 10.2. It is, therefore, affected by multiple vulnerabilities.

The PostgreSQL project reports :

- CVE-2018-1052: Fix the processing of partition keys containing multiple expressions (only for PostgreSQL-10.x)

- CVE-2018-1053: Ensure that all temporary files made with 'pg_upgrade' are non-world-readable

ID	Name	Product	Family	Severity
425710	Alpine: postgresql14: security update to 10.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
425710	Alpine: postgresql14: security update to 10.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
425678	Alpine: multiple postgresql15 packages: security update to 10.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
425678	Alpine: multiple postgresql15 packages: security update to 10.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
406454	Alpine: postgresql: security update to 10.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
406454	Alpine: postgresql: security update to 10.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
121919	Photon OS 2.0: Postgresql PHSA-2018-2.0-0016	Nessus	PhotonOS Local Security Checks	high
121809	Photon OS 1.0: Postgresql PHSA-2018-1.0-0108	Nessus	PhotonOS Local Security Checks	high
106842	PostgreSQL 9.3.x < 9.3.21 / 9.4.x < 9.4.16 / 9.5.x < 9.5.11 / 9.6.x < 9.6.7 / 10.x < 10.2 Multiple Vulnerabilities	Nessus	Databases	high
106701	FreeBSD : PostgreSQL vulnerabilities (c602c791-0cf4-11e8-a2ec-6cc21735f730)	Nessus	FreeBSD Local Security Checks	high

Detections

Analytics

CVE-2018-1052

medium

Tenable Plugins

high

high

high

high

high

high

high

high

high

high