CVE-2018-1052
MEDIUMPostgreSQL 10.x < 10.2 - Authenticated Memory Disclosure via Partitioned Table Insert
Title source: llmDescription
Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table.
References (2)
Core 2
Core References
Patch, Release Notes, Vendor Advisory x_refsource_confirm
https://www.postgresql.org/about/news/1829/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/102987
Scores
CVSS v3
6.5
EPSS
0.0047
EPSS Percentile
64.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (2)
postgresql/postgresql
10.0
postgresql/postgresql
10.1
Published
Feb 09, 2018
Tracked Since
Feb 18, 2026