CVE-2019-10164

원문 설명

PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.

영향받는 소프트웨어

• PostgreSQL ≥ 10.0 < 10.9≥ 11.0 < 11.4 수정 버전: 10.9, 11.4 정확 일치

상세

공개일

2019-06-27

최종 수정

2024-08-05

CVSS 벡터

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-121

참고 자료

• cve.org/CVE-2019-10164
• nvd.nist.gov/vuln/detail/CVE-2019-10164
• bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10164
• www.postgresql.org/about/news/1949/
• lists.opensuse.org/opensuse-security-announce/2019-07/msg00035.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M...
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T...
• security.gentoo.org/glsa/202003-03