CVE-2018-1052

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2,...

6.5 MediumFix available

CVE-2018-1052 is a medium vulnerability (CVSS 6.5) in Postgresql, published February 9, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.79%, the 78th percentile. Fixed in postgresql 10.2-r0.

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

1.79%Up 1.2 points since Apr 14, 2021

What each source reports

NVD Score used 6.5

Record: CVE-2018-1052
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 4.0 MediumAV:N/AC:L/Au:S/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2018-1052
Weakness: CWE-200
Updated: 2026-11-02

EUVDEUVD-2018-11705 No score

Record: EUVD-2018-11705
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qwcr-cgjv-9rp7 6.5

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2,...

Record: GHSA-qwcr-cgjv-9rp7
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

OSVALPINE-CVE-2018-1052 6.5

Record: ALPINE-CVE-2018-1052
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVBELL-CVE-2018-1052 6.5

CVE-2018-1052 does not affect BellSoft software

Record: BELL-CVE-2018-1052
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSV 6.5

Record: CVE-2018-1052
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

OSVopenSUSE-SU-2024:11184-1 No score

postgresql10-10.18-1.3 on GA media

These are all security issues fixed in the postgresql10-10.18-1.3 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:11184-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`postgresql` Alpine:v3.10	before 10.2-r0	10.2-r0
`postgresql` Alpine:v3.11	before 10.2-r0	10.2-r0
`postgresql` Alpine:v3.12	before 10.2-r0	10.2-r0
`postgresql` Alpine:v3.13	before 10.2-r0	10.2-r0
`postgresql` Alpine:v3.14	before 10.2-r0	10.2-r0
`postgresql` Alpine:v3.7	before 10.2-r0	10.2-r0
`postgresql` Alpine:v3.8	before 10.2-r0	10.2-r0
`postgresql` Alpine:v3.9	before 10.2-r0	10.2-r0
`postgresql14` Alpine:v3.15	before 10.2-r0	10.2-r0
`postgresql14` Alpine:v3.16	before 10.2-r0	10.2-r0

Show 7 moreShow less

Affected packages
Package	Affected	Fixed
`postgresql14` Alpine:v3.17	before 10.2-r0	10.2-r0
`postgresql14` Alpine:v3.18	before 10.2-r0	10.2-r0
`postgresql15` Alpine:v3.17	before 10.2-r0	10.2-r0
`postgresql15` Alpine:v3.18	before 10.2-r0	10.2-r0
`postgresql15` Alpine:v3.19	before 10.2-r0	10.2-r0
`postgresql15` Alpine:v3.20	before 10.2-r0	10.2-r0
`postgresql10` openSUSE:Tumbleweed	before 10.18-1.3	10.18-1.3

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 20 moreShow less