Every CVE Search/ Get API key

CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other...

8.8 HighPublic exploitFix available

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

13.1%Up 10.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Record
CVE-2018-1058
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Record
CVE-2018-1058
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2018-11711 No score

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Record
EUVD-2018-11711
Updated
2026-11-03
GitHub AdvisoriesGHSA-wj3f-f94q-2r98 8.8

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other...

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Record
GHSA-wj3f-f94q-2r98
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALPINE-CVE-2018-1058 8.8

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Record
ALPINE-CVE-2018-1058
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2018-1058 8.8

CVE-2018-1058 does not affect BellSoft software

Record
BELL-CVE-2018-1058
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 12 moreShow less
OSV 8.8

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Record
CVE-2018-1058
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:2511 8.8

Red Hat Security Advisory: rh-postgresql95-postgresql security update

Record
RHSA-2018:2511
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:2566 8.8

Red Hat Security Advisory: rh-postgresql96-postgresql security update

Record
RHSA-2018:2566
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2018:3816 8.8

Red Hat Security Advisory: CloudForms 4.6.6 security, bug fix and enhancement update

Record
RHSA-2018:3816
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2018-1058 8.8

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Record
UBUNTU-CVE-2018-1058
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2018-0446 No score

Updated postgresql9.4|6 packages fix security vulnerabilities

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database (CVE-2018-1058).

Postgresql 9.6.x before 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation (CVE-2018-1115).

Andrew Krasichkov discovered that libpq did not reset all its connection state during reconnects (CVE-2018-10915).

It was discovered that some "CREATE TABLE" statements could disclose server memory (CVE-2018-10925).

Fully fixing these security issues requires manual intervention. See the upstream advisories for details.

Record
MGASA-2018-0446
Updated
2026-11-02
OSVopenSUSE-SU-2024:11184-1 No score

postgresql10-10.18-1.3 on GA media

These are all security issues fixed in the postgresql10-10.18-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11184-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11167-1 No score

kubectl-cnpg-1.29.2-1.1 on GA media

These are all security issues fixed in the kubectl-cnpg-1.29.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11167-1
Updated
2026-11-02
OSVSUSE-SU-2018:0755-1 No score

Security update for postgresql94

This update for postgresql94 fixes the following issues:

Security issues fixed:

  • CVE-2018-1058: Fixed uncontrolled search path element in pg_dump and other client applications (bsc#1081925).

Bug fixes:

Record
SUSE-SU-2018:0755-1
Updated
2026-11-02
OSVSUSE-SU-2018:0756-1 No score

Security update for postgresql96

This update for postgresql96 fixes the following issues:

Security issues fixed:

  • CVE-2018-1058: Fixed uncontrolled search path element in pg_dump and other client applications (bsc#1081925).

Bug fixes:

Record
SUSE-SU-2018:0756-1
Updated
2026-11-02
OSVSUSE-SU-2018:0876-1 No score

Security update for postgresql94

This update for postgresql94 fixes the following issues:

Security issues fixed:

  • CVE-2018-1058: Fixed uncontrolled search path element in pg_dump and other client applications (bsc#1081925).

Bug fixes:

Record
SUSE-SU-2018:0876-1
Updated
2026-11-02
OSVUSN-3589-1 No score

postgresql-9.3, postgresql-9.5, postgresql-9.6 vulnerability

It was discovered that PostgreSQL incorrectly handled certain settings. An attacker could possibly use this issue to execute arbitrary code.

Record
USN-3589-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postgresql
Alpine:v3.10
 9.3 up to 10.3-r0
10.3-r0
postgresql
Alpine:v3.11
 9.3 up to 10.3-r0
10.3-r0
postgresql
Alpine:v3.12
 9.3 up to 10.3-r0
10.3-r0
postgresql
Alpine:v3.13
 9.3 up to 10.3-r0
10.3-r0
postgresql
Alpine:v3.14
 9.3 up to 10.3-r0
10.3-r0
postgresql
Alpine:v3.4
 9.3 up to 9.5.12-r0
9.5.12-r0
postgresql
Alpine:v3.5
 9.3 up to 9.6.8-r0
9.6.8-r0
postgresql
Alpine:v3.6
 9.3 up to 9.6.8-r0
9.6.8-r0
postgresql
Alpine:v3.7
 9.3 up to 10.3-r0
10.3-r0
postgresql
Alpine:v3.8
 9.3 up to 10.3-r0
10.3-r0
Show 120 moreShow less
Affected packages
PackageAffectedFixed
postgresql
Alpine:v3.9
 9.3 up to 10.3-r0
10.3-r0
postgresql14
Alpine:v3.15
 before 10.3-r0
10.3-r0
postgresql14
Alpine:v3.16
 before 10.3-r0
10.3-r0
postgresql14
Alpine:v3.17
 before 10.3-r0
10.3-r0
postgresql14
Alpine:v3.18
 before 10.3-r0
10.3-r0
postgresql14
Alpine:v3.19
 before 10.3-r0
10.3-r0
postgresql14
Alpine:v3.20
 before 10.3-r0
10.3-r0
postgresql15
Alpine:v3.17
 before 10.3-r0
10.3-r0
postgresql15
Alpine:v3.18
 before 10.3-r0
10.3-r0
postgresql15
Alpine:v3.19
 before 10.3-r0
10.3-r0
postgresql15
Alpine:v3.20
 before 10.3-r0
10.3-r0
postgresql9.4
Mageia:6
 before 9.4.19-1.mga6
9.4.19-1.mga6
postgresql9.6
Mageia:6
 before 9.6.10-3.mga6
9.6.10-3.mga6
rh-postgresql95-postgresql
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-contrib
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-debuginfo
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-devel
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-docs
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-libs
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-plperl
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-plpython
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-pltcl
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-server
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-static
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql-test
Red Hat:rhel_software_collections:3::el6
 before 0:9.5.14-1.el6
0:9.5.14-1.el6
rh-postgresql95-postgresql
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-contrib
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-devel
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-docs
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-libs
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-plperl
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-plpython
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-pltcl
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-server
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-static
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql95-postgresql-test
Red Hat:rhel_software_collections:3::el7
 before 0:9.5.14-1.el7
0:9.5.14-1.el7
rh-postgresql96-postgresql
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-contrib
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-contrib-syspaths
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-debuginfo
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-devel
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-docs
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-libs
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-plperl
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-plpython
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-pltcl
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-server
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-server-syspaths
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-static
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-syspaths
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql-test
Red Hat:rhel_software_collections:3::el6
 before 0:9.6.10-1.el6
0:9.6.10-1.el6
rh-postgresql96-postgresql
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-contrib
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-contrib-syspaths
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-debuginfo
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-devel
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-docs
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-libs
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-plperl
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-plpython
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-pltcl
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-server
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-server-syspaths
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-static
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-syspaths
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
rh-postgresql96-postgresql-test
Red Hat:rhel_software_collections:3::el7
 before 0:9.6.10-1.el7
0:9.6.10-1.el7
cfme
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-3.el7cf
0:5.9.6.5-3.el7cf
cfme-amazon-smartstate
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-2.el7cf
0:5.9.6.5-2.el7cf
cfme-appliance
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-1.el7cf
0:5.9.6.5-1.el7cf
cfme-appliance-common
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-1.el7cf
0:5.9.6.5-1.el7cf
cfme-appliance-debuginfo
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-1.el7cf
0:5.9.6.5-1.el7cf
cfme-appliance-tools
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-1.el7cf
0:5.9.6.5-1.el7cf
cfme-debuginfo
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-3.el7cf
0:5.9.6.5-3.el7cf
cfme-gemset
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-2.el7cf
0:5.9.6.5-2.el7cf
cfme-gemset-debuginfo
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:5.9.6.5-2.el7cf
0:5.9.6.5-2.el7cf
dbus-api-service
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:1.0.1-3.1.el7cf
0:1.0.1-3.1.el7cf
httpd-configmap-generator
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:0.2.2-1.2.el7cf
0:0.2.2-1.2.el7cf
postgresql96
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-contrib
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-debuginfo
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-devel
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-docs
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-libs
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-plperl
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-plpython
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-pltcl
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-server
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-test
Red Hat:cloudforms_managementengine:5.9::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql94-libs
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 9.4.17-0.23.16.1
9.4.17-0.23.16.1
postgresql94
SUSE:Linux Enterprise Server 11 SP4
 before 9.4.17-0.23.16.1
9.4.17-0.23.16.1
postgresql94-libs
SUSE:Linux Enterprise Server 11 SP4
 before 9.4.17-0.23.16.1
9.4.17-0.23.16.1
postgresql94
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 9.4.17-0.23.16.1
9.4.17-0.23.16.1
postgresql94-libs
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 9.4.17-0.23.16.1
9.4.17-0.23.16.1
postgresql96
SUSE:Linux Enterprise Desktop 12 SP2
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96-libs
SUSE:Linux Enterprise Desktop 12 SP2
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96
SUSE:Linux Enterprise Desktop 12 SP3
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96-libs
SUSE:Linux Enterprise Desktop 12 SP3
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96-libs
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96-libs
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96-libs
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96
SUSE:Linux Enterprise Server 12 SP2
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96-libs
SUSE:Linux Enterprise Server 12 SP2
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96-libs
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96
SUSE:Linux Enterprise Server 12 SP3
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96-libs
SUSE:Linux Enterprise Server 12 SP3
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql96-libs
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 9.6.8-3.16.1
9.6.8-3.16.1
postgresql94
SUSE:Linux Enterprise Desktop 12 SP2
 before 9.4.17-21.19.1
9.4.17-21.19.1
postgresql94
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 9.4.17-21.19.1
9.4.17-21.19.1
postgresql94-libs
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 9.4.17-21.19.1
9.4.17-21.19.1
postgresql94
SUSE:Linux Enterprise Server 12 SP2
 before 9.4.17-21.19.1
9.4.17-21.19.1
postgresql94
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 9.4.17-21.19.1
9.4.17-21.19.1
postgresql-9.3
Ubuntu:14.04:LTS
 before 9.3.22-0ubuntu0.14.04, plus listed versions
9.3.1-19.3.2-19.3.2-1ubuntu19.3.2-1ubuntu29.3.3-1
Show 20 moreShow less
9.3.3-1bzr19.3.3-1bzr29.3.4-19.3.5-0ubuntu0.14.04.19.3.6-0ubuntu0.14.049.3.7-0ubuntu0.14.049.3.8-0ubuntu0.4.049.3.9-0ubuntu0.14.049.3.10-0ubuntu0.14.049.3.11-0ubuntu0.14.049.3.12-0ubuntu0.14.049.3.13-0ubuntu0.14.049.3.14-0ubuntu0.14.049.3.15-0ubuntu0.14.049.3.16-0ubuntu0.14.049.3.17-0ubuntu0.14.049.3.18-0ubuntu0.14.04.19.3.19-0ubuntu0.14.049.3.20-0ubuntu0.14.049.3.21-0ubuntu0.14.04
9.3.22-0ubuntu0.14.04
postgresql-9.5
Ubuntu:16.04:LTS
 before 9.5.12-0ubuntu0.16.04, plus listed versions
9.5.0-19.5.0-29.5.0-39.5.1-19.5.2-1
Show 9 moreShow less
9.5.3-0ubuntu0.16.049.5.4-0ubuntu0.16.049.5.5-0ubuntu0.16.049.5.6-0ubuntu0.16.049.5.7-0ubuntu0.16.049.5.8-0ubuntu0.16.04.19.5.9-0ubuntu0.16.049.5.10-0ubuntu0.16.049.5.11-0ubuntu0.16.04
9.5.12-0ubuntu0.16.04
postgresql-10
Ubuntu:18.04:LTS
 before 10.3-1, plus listed versions
10.1-110.1-210.2-1
10.3-1
postgresql10
openSUSE:Tumbleweed
 before 10.18-1.3
10.18-1.3
kubectl-cnpg
openSUSE:Tumbleweed
 before 1.29.2-1.1
1.29.2-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubccchme/CVE-2018-10582026-05-09
PoC in GitHubmthamil107/DB_Audit_Research2026-08-19

History

History
RecordedChangedSources
affectedOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-1058 is a high vulnerability (CVSS 8.8) in Postgresql, published February 28, 2018. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.1%, the 96th percentile. Fixed in postgresql 10.3-r0.

References

Show 138 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open