Every CVE Search/ Get API key

CVE-2018-1053

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7...

7.0 HighFix available

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of pg_dumpall -g under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.48%Down 1.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.0

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of pg_dumpall -g under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file.

Record
CVE-2018-1053
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
3.3 LowAV:L/AC:M/Au:N/C:P/I:P/A:N
Weakness
CWE-377, CWE-732
Updated
2026-11-02
CVE List No score

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of pg_dumpall -g under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file.

Record
CVE-2018-1053
Weakness
CWE-377
Updated
2026-11-02
EUVDEUVD-2018-11706 No score

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of pg_dumpall -g under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file.

Record
EUVD-2018-11706
Updated
2026-11-03
GitHub AdvisoriesGHSA-h73g-3m4r-j2cr 7.0

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7...

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of pg_dumpall -g under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file.

Record
GHSA-h73g-3m4r-j2cr
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-732
Updated
2026-11-02
OSVALPINE-CVE-2018-1053 7.0

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of pg_dumpall -g under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file.

Record
ALPINE-CVE-2018-1053
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2018-1053 7.0

CVE-2018-1053 does not affect BellSoft software

Record
BELL-CVE-2018-1053
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 11 moreShow less
OSV 7.0

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of pg_dumpall -g under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file.

Record
CVE-2018-1053
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:2511 8.8

Red Hat Security Advisory: rh-postgresql95-postgresql security update

Record
RHSA-2018:2511
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:2566 8.8

Red Hat Security Advisory: rh-postgresql96-postgresql security update

Record
RHSA-2018:2566
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:3816 8.8

Red Hat Security Advisory: CloudForms 4.6.6 security, bug fix and enhancement update

Record
RHSA-2018:3816
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-1053 7.0

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of pg_dumpall -g under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file.

Record
UBUNTU-CVE-2018-1053
CVSS 3.0
7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2018-0137 No score

Updated postgresql packages fix security vulnerability

In postgresql 9.4.x before 9.4.16 and 9.6.x before 9.6.7, pg_upgrade creates file in current working directory containing the output of pg_dumpall -g under umask which was in effect when the user invoked pg_upgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file (CVE-2018-1053).

Note that on Mageia 5, only the postgresql9.4 update is being provided. Users of the postgresql9.3 package should migrate to 9.4.

Record
MGASA-2018-0137
Updated
2026-11-02
OSVopenSUSE-SU-2024:11184-1 No score

postgresql10-10.18-1.3 on GA media

These are all security issues fixed in the postgresql10-10.18-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11184-1
Updated
2026-11-02
OSVSUSE-SU-2018:0506-1 No score

Security update for postgresql94

This update for postgresql94 fixes the following issues:

PostgreSQL was updated to version 9.4.16, full release notes:

https://www.postgresql.org/docs/9.4/static/release-9-4-16.html

Security issues fixed:

  • CVE-2018-1053: Ensure that all temporary files made by pg_upgrade are non-world-readable. (bsc#1077983)
Record
SUSE-SU-2018:0506-1
Updated
2026-11-02
OSVSUSE-SU-2018:0507-1 No score

Security update for postgresql96

This update for postgresql96 to version 9.6.7 fixes the following issues:

  • CVE-2018-1053: Ensure that all temporary files made by pg_upgrade are non-world-readable. (bsc#1077983)

A full changelog is available here:

https://www.postgresql.org/docs/9.6/static/release-9-6-7.html
Record
SUSE-SU-2018:0507-1
Updated
2026-11-02
OSVSUSE-SU-2018:0675-1 No score

Security update for postgresql94

This update for postgresql94 fixes the following issues:

PostgreSQL was updated to version 9.4.15, the full release notes are here:

https://www.postgresql.org/docs/9.4/static/release-9-4-15.html
  • CVE-2018-1053: Ensure that all temporary files made by pg_upgrade are non-world-readable. (bsc#1077983)
Record
SUSE-SU-2018:0675-1
Updated
2026-11-02
OSVUSN-3564-1 No score

postgresql-9.3, postgresql-9.5, postgresql-9.6 vulnerability

It was discovered that PostgreSQL incorrectly handled certain temp files. An attacker could possibly use this to access sensitive information.

Record
USN-3564-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postgresql
Alpine:v3.10
 9.3.0 up to 10.2-r0
10.2-r0
postgresql
Alpine:v3.11
 9.3.0 up to 10.2-r0
10.2-r0
postgresql
Alpine:v3.12
 9.3.0 up to 10.2-r0
10.2-r0
postgresql
Alpine:v3.13
 9.3.0 up to 10.2-r0
10.2-r0
postgresql
Alpine:v3.14
 9.3.0 up to 10.2-r0
10.2-r0
postgresql
Alpine:v3.4
 9.3.0 up to 9.5.11-r0
9.5.11-r0
postgresql
Alpine:v3.5
 9.3.0 up to 9.6.7-r0
9.6.7-r0
postgresql
Alpine:v3.6
 9.3.0 up to 9.6.7-r0
9.6.7-r0
postgresql
Alpine:v3.7
 9.3.0 up to 10.2-r0
10.2-r0
postgresql
Alpine:v3.8
 9.3.0 up to 10.2-r0
10.2-r0
Show 118 moreShow less
Affected packages
PackageAffectedFixed
postgresql
Alpine:v3.9
 9.3.0 up to 10.2-r0
10.2-r0
postgresql14
Alpine:v3.15
 before 10.2-r0
10.2-r0
postgresql14
Alpine:v3.16
 before 10.2-r0
10.2-r0
postgresql14
Alpine:v3.17
 before 10.2-r0
10.2-r0
postgresql14
Alpine:v3.18
 before 10.2-r0
10.2-r0
postgresql15
Alpine:v3.17
 before 10.2-r0
10.2-r0
postgresql15
Alpine:v3.18
 before 10.2-r0
10.2-r0
postgresql15
Alpine:v3.19
 before 10.2-r0
10.2-r0
postgresql15
Alpine:v3.20
 before 10.2-r0
10.2-r0
postgresql-9.1
Debian:7
 before 9.1.24lts2-0+deb7u2, plus listed versions
9.1.10-0wheezy19.1.10-19.1.11-0wheezy19.1.11-19.1.11-1~bpo60+1
Show 27 moreShow less
9.1.11-29.1.12-0wheezy19.1.12-0wheezy1~bpo60+19.1.12-19.1.13-0wheezy19.1.13-0wheezy1~bpo60+19.1.13-19.1.14-0+deb7u19.1.14-0wheezy19.1.15-0+deb7u19.1.15-0+deb7u1~bpo60+19.1.16-0+deb7u19.1.16-0+deb7u29.1.17-0+deb7u19.1.18-0+deb7u19.1.19-0+deb7u19.1.20-0+deb7u19.1.21-0+deb7u19.1.22-0+deb7u19.1.23-0+deb7u19.1.24-0+deb7u19.1.24lts2-0+deb7u19.1.9-19.1.9-29.1.9-39.1.9-49.1.9-5
9.1.24lts2-0+deb7u2
postgresql9.4
Mageia:5
 before 9.4.16-1.mga5
9.4.16-1.mga5
postgresql9.4
Mageia:6
 before 9.4.16-1.mga6
9.4.16-1.mga6
postgresql9.6
Mageia:6
 before 9.6.7-1.mga6
9.6.7-1.mga6
rh-postgresql95-postgresql
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-contrib
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-debuginfo
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-devel
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-docs
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-libs
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-plperl
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-plpython
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-pltcl
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-server
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-static
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-test
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-contrib
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-devel
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-docs
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-libs
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-plperl
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-plpython
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-pltcl
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-server
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-static
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-test
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql96-postgresql
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-contrib
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-contrib-syspaths
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-debuginfo
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-devel
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-docs
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-libs
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-plperl
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-plpython
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-pltcl
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-server
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-server-syspaths
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-static
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-syspaths
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-test
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-contrib
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-contrib-syspaths
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-devel
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-docs
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-libs
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-plperl
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-plpython
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-pltcl
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-server
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-server-syspaths
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-static
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-syspaths
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-test
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
cfme
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-3.el7cf
0:5.9.6.5-3.el7cf
cfme-amazon-smartstate
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-2.el7cf
0:5.9.6.5-2.el7cf
cfme-appliance
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-1.el7cf
0:5.9.6.5-1.el7cf
cfme-appliance-common
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-1.el7cf
0:5.9.6.5-1.el7cf
cfme-appliance-debuginfo
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-1.el7cf
0:5.9.6.5-1.el7cf
cfme-appliance-tools
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-1.el7cf
0:5.9.6.5-1.el7cf
cfme-debuginfo
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-3.el7cf
0:5.9.6.5-3.el7cf
cfme-gemset
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-2.el7cf
0:5.9.6.5-2.el7cf
cfme-gemset-debuginfo
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-2.el7cf
0:5.9.6.5-2.el7cf
dbus-api-service
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:1.0.1-3.1.el7cf
0:1.0.1-3.1.el7cf
httpd-configmap-generator
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:0.2.2-1.2.el7cf
0:0.2.2-1.2.el7cf
postgresql96
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-contrib
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-debuginfo
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-devel
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-docs
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-libs
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-plperl
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-plpython
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-pltcl
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-server
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-test
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql94-libs
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 9.4.16-0.23.13.2
9.4.16-0.23.13.2
postgresql94
SUSE:Linux Enterprise Server 11 SP4
 before 9.4.16-0.23.13.2
9.4.16-0.23.13.2
postgresql94-libs
SUSE:Linux Enterprise Server 11 SP4
 before 9.4.16-0.23.13.2
9.4.16-0.23.13.2
postgresql94
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 9.4.16-0.23.13.2
9.4.16-0.23.13.2
postgresql94-libs
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 9.4.16-0.23.13.2
9.4.16-0.23.13.2
postgresql96
SUSE:Linux Enterprise Desktop 12 SP2
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96-libs
SUSE:Linux Enterprise Desktop 12 SP2
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96
SUSE:Linux Enterprise Desktop 12 SP3
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96-libs
SUSE:Linux Enterprise Desktop 12 SP3
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96-libs
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96-libs
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96-libs
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96
SUSE:Linux Enterprise Server 12 SP2
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96-libs
SUSE:Linux Enterprise Server 12 SP2
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96-libs
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96
SUSE:Linux Enterprise Server 12 SP3
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96-libs
SUSE:Linux Enterprise Server 12 SP3
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql96-libs
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 9.6.7-3.13.1
9.6.7-3.13.1
postgresql94
SUSE:Linux Enterprise Desktop 12 SP2
 before 9.4.16-21.16.1
9.4.16-21.16.1
postgresql94
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 9.4.16-21.16.1
9.4.16-21.16.1
postgresql94-libs
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 9.4.16-21.16.1
9.4.16-21.16.1
postgresql94
SUSE:Linux Enterprise Server 12 SP2
 before 9.4.16-21.16.1
9.4.16-21.16.1
postgresql94
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 9.4.16-21.16.1
9.4.16-21.16.1
postgresql-9.3
Ubuntu:14.04:LTS
 before 9.3.21-0ubuntu0.14.04, plus listed versions
9.3.1-19.3.2-19.3.2-1ubuntu19.3.2-1ubuntu29.3.3-1
Show 19 moreShow less
9.3.3-1bzr19.3.3-1bzr29.3.4-19.3.5-0ubuntu0.14.04.19.3.6-0ubuntu0.14.049.3.7-0ubuntu0.14.049.3.8-0ubuntu0.4.049.3.9-0ubuntu0.14.049.3.10-0ubuntu0.14.049.3.11-0ubuntu0.14.049.3.12-0ubuntu0.14.049.3.13-0ubuntu0.14.049.3.14-0ubuntu0.14.049.3.15-0ubuntu0.14.049.3.16-0ubuntu0.14.049.3.17-0ubuntu0.14.049.3.18-0ubuntu0.14.04.19.3.19-0ubuntu0.14.049.3.20-0ubuntu0.14.04
9.3.21-0ubuntu0.14.04
postgresql-9.5
Ubuntu:16.04:LTS
 before 9.5.11-0ubuntu0.16.04, plus listed versions
9.5.0-19.5.0-29.5.0-39.5.1-19.5.2-1
Show 8 moreShow less
9.5.3-0ubuntu0.16.049.5.4-0ubuntu0.16.049.5.5-0ubuntu0.16.049.5.6-0ubuntu0.16.049.5.7-0ubuntu0.16.049.5.8-0ubuntu0.16.04.19.5.9-0ubuntu0.16.049.5.10-0ubuntu0.16.04
9.5.11-0ubuntu0.16.04
postgresql10
openSUSE:Tumbleweed
 before 10.18-1.3
10.18-1.3

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-1053 is a high vulnerability (CVSS 7.0) in Postgresql, published February 7, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in postgresql 10.2-r0.

References

Show 130 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open