{"id":"CVE-2018-1058","aliases":["ALPINE-CVE-2018-1058","BELL-CVE-2018-1058","EUVD-2018-11711","GHSA-wj3f-f94q-2r98","MGASA-2018-0446","RHSA-2018:2511","RHSA-2018:2566","RHSA-2018:3816","SUSE-SU-2018:0755-1","SUSE-SU-2018:0756-1","SUSE-SU-2018:0876-1","UBUNTU-CVE-2018-1058","USN-3589-1","openSUSE-SU-2024:11184-1","openSUSE-SU-2026:11167-1"],"status":"published","title":"A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other...","description":"A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.13098,"percentile":0.96379,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-20"],"published":"2018-02-28T00:00:00Z","modified":"2026-11-03T06:30:07Z","exploits":[{"source":"pocgithub","id":"ccchme/CVE-2018-1058","title":"ccchme/CVE-2018-1058","date":"2026-05-09","url":"https://github.com/ccchme/CVE-2018-1058"},{"source":"pocgithub","id":"mthamil107/DB_Audit_Research","title":"mthamil107/DB_Audit_Research","date":"2026-08-19","url":"https://github.com/mthamil107/DB_Audit_Research"}],"fixes":[{"ecosystem":"Alpine:v3.10","package":"postgresql","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"postgresql","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"postgresql","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"postgresql","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"postgresql","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"postgresql","fixed_in":["9.5.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"postgresql","fixed_in":["9.6.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"postgresql","fixed_in":["9.6.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"postgresql","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"postgresql","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"postgresql","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"postgresql14","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"postgresql14","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql14","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql14","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql14","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql14","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql15","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql15","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql15","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql15","fixed_in":["10.3-r0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"postgresql94-libs","fixed_in":["9.4.17-0.23.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"postgresql94","fixed_in":["9.4.17-0.23.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"postgresql94-libs","fixed_in":["9.4.17-0.23.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"postgresql94","fixed_in":["9.4.17-0.23.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"postgresql94-libs","fixed_in":["9.4.17-0.23.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"postgresql96","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"postgresql96-libs","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"postgresql96","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"postgresql96-libs","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"postgresql96","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"postgresql96-libs","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"postgresql96-libs","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"postgresql96-libs","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"postgresql96","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"postgresql96-libs","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"postgresql96","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"postgresql96-libs","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"postgresql96","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"postgresql96-libs","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql96","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql96-libs","fixed_in":["9.6.8-3.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"postgresql94","fixed_in":["9.4.17-21.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"postgresql94","fixed_in":["9.4.17-21.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"postgresql94-libs","fixed_in":["9.4.17-21.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"postgresql94","fixed_in":["9.4.17-21.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"postgresql94","fixed_in":["9.4.17-21.19.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","fixed_in":["9.3.22-0ubuntu0.14.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"postgresql-9.5","fixed_in":["9.5.12-0ubuntu0.16.04"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"postgresql-10","fixed_in":["10.3-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"9.5.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"9.6.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"9.6.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.3"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-r0"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"postgresql9.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.19-1.mga6"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:6","package":"postgresql9.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.10-3.mga6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql95-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el6"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql95-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.5.14-1.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-contrib-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-server-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-postgresql96-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-contrib-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-server-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql96-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1.el7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.6.5-3.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-amazon-smartstate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.6.5-2.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.6.5-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.6.5-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.6.5-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-appliance-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.6.5-1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.6.5-3.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-gemset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.6.5-2.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"cfme-gemset-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.6.5-2.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"dbus-api-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-3.1.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"httpd-configmap-generator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.2.el7cf"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:cloudforms_managementengine:5.9::el7","package":"postgresql96-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:9.6.10-1PGDG.el7at"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.17-0.23.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.17-0.23.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.17-0.23.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.17-0.23.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.17-0.23.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql96","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql96-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.8-3.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.17-21.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.17-21.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"postgresql94-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.17-21.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.17-21.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"postgresql94","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.4.17-21.19.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.22-0ubuntu0.14.04"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04","9.3.7-0ubuntu0.14.04","9.3.8-0ubuntu0.4.04","9.3.9-0ubuntu0.14.04","9.3.10-0ubuntu0.14.04","9.3.11-0ubuntu0.14.04","9.3.12-0ubuntu0.14.04","9.3.13-0ubuntu0.14.04","9.3.14-0ubuntu0.14.04","9.3.15-0ubuntu0.14.04","9.3.16-0ubuntu0.14.04","9.3.17-0ubuntu0.14.04","9.3.18-0ubuntu0.14.04.1","9.3.19-0ubuntu0.14.04","9.3.20-0ubuntu0.14.04","9.3.21-0ubuntu0.14.04"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"postgresql-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.12-0ubuntu0.16.04"}]}],"versions":["9.5.0-1","9.5.0-2","9.5.0-3","9.5.1-1","9.5.2-1","9.5.3-0ubuntu0.16.04","9.5.4-0ubuntu0.16.04","9.5.5-0ubuntu0.16.04","9.5.6-0ubuntu0.16.04","9.5.7-0ubuntu0.16.04","9.5.8-0ubuntu0.16.04.1","9.5.9-0ubuntu0.16.04","9.5.10-0ubuntu0.16.04","9.5.11-0ubuntu0.16.04"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"postgresql-10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.3-1"}]}],"versions":["10.1-1","10.1-2","10.2-1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"postgresql-9.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.22-0ubuntu0.14.04"}]}],"versions":["9.3.1-1","9.3.2-1","9.3.2-1ubuntu1","9.3.2-1ubuntu2","9.3.3-1","9.3.3-1bzr1","9.3.3-1bzr2","9.3.4-1","9.3.5-0ubuntu0.14.04.1","9.3.6-0ubuntu0.14.04","9.3.7-0ubuntu0.14.04","9.3.8-0ubuntu0.4.04","9.3.9-0ubuntu0.14.04","9.3.10-0ubuntu0.14.04","9.3.11-0ubuntu0.14.04","9.3.12-0ubuntu0.14.04","9.3.13-0ubuntu0.14.04","9.3.14-0ubuntu0.14.04","9.3.15-0ubuntu0.14.04","9.3.16-0ubuntu0.14.04","9.3.17-0ubuntu0.14.04","9.3.18-0ubuntu0.14.04.1","9.3.19-0ubuntu0.14.04","9.3.20-0ubuntu0.14.04","9.3.21-0ubuntu0.14.04"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"postgresql-9.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.5.12-0ubuntu0.16.04"}]}],"versions":["9.5.0-1","9.5.0-2","9.5.0-3","9.5.1-1","9.5.2-1","9.5.3-0ubuntu0.16.04","9.5.4-0ubuntu0.16.04","9.5.5-0ubuntu0.16.04","9.5.6-0ubuntu0.16.04","9.5.7-0ubuntu0.16.04","9.5.8-0ubuntu0.16.04.1","9.5.9-0ubuntu0.16.04","9.5.10-0ubuntu0.16.04","9.5.11-0ubuntu0.16.04"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.18-1.3"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kubectl-cnpg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.29.2-1.1"}]}],"bundled":3}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"postgresql","product":"postgresql"},{"vendor":"redhat","product":"cloudforms"},{"vendor":"the postgresql global development group","product":"postgresql"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1547044","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://usn.ubuntu.com/3589-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/103221","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.postgresql.org/about/news/1834/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2511","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2566","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3816","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1058","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wj3f-f94q-2r98"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-1058","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-1058","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0446.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22687","tags":["report"]},{"url":"https://www.postgresql.org/docs/9.4/static/release-9-4-17.html","tags":["web"]},{"url":"https://www.postgresql.org/docs/9.4/static/release-9-4-18.html","tags":["web"]},{"url":"https://www.postgresql.org/docs/9.4/static/release-9-4-19.html","tags":["web"]},{"url":"https://www.postgresql.org/docs/9.6/static/release-9-6-8.html","tags":["web"]},{"url":"https://www.postgresql.org/docs/9.6/static/release-9-6-9.html","tags":["web"]},{"url":"https://www.postgresql.org/docs/9.6/static/release-9-6-10.html","tags":["web"]},{"url":"https://www.postgresql.org/about/news/1851/","tags":["web"]},{"url":"https://www.postgresql.org/about/news/1878/","tags":["web","article"]},{"url":"https://www.debian.org/security/2018/dsa-4269","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508823","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1539619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1612619","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2511.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15098","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15098","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15098","tags":["advisory"]},{"url":"https://www.postgresql.org/about/news/1801/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15099","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15099","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15099","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1053","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1053","tags":["advisory"]},{"url":"https://www.postgresql.org/about/news/1829/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1058","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1058","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10915","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10915","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10915","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10925","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10925","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10925","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573276","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2566.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1115","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1115","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1115","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_cloudforms/4.6/html/release_notes","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610547","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1634809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1635788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1639351","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1639353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1639364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1641771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1643959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1645198","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1645204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1647056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1647108","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1647188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1647489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1650691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1651391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1653417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1653710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1654436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1654463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656169","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3816.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180755-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1081925","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1058","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180756-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180876-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1058","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3589-1","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1752271","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55769","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-1058","description":"A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.","status":"published","published":"2018-03-02T15:00:00Z","modified":"2024-09-17T03:22:50.533Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:08.701206Z"}],"euvd":[{"id":"EUVD-2018-11711","description":"A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.","status":"published","published":"2018-03-02T15:00:00Z","modified":"2024-09-17T03:22:50Z","updated_at":"2026-11-03T00:28:32.482778Z"}],"ghsa":[{"id":"GHSA-wj3f-f94q-2r98","title":"A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other...","description":"A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.","status":"published","published":"2022-05-13T01:33:34Z","modified":"2023-01-27T05:05:52Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:42:47.147954Z"}],"nvd":[{"id":"CVE-2018-1058","description":"A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.","status":"published","published":"2018-03-02T15:29:00.337Z","modified":"2026-06-17T01:50:23.083Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:23.783914Z"}],"osv":[{"id":"ALPINE-CVE-2018-1058","description":"A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.","status":"published","published":"2018-03-02T15:29:00.337Z","modified":"2026-11-03T06:30:07.839069937Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T06:41:39.834803Z"},{"id":"BELL-CVE-2018-1058","title":"CVE-2018-1058 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:33.385491Z","modified":"2026-01-26T09:47:12.019093Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-1058","description":"A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.","status":"published","published":"2018-03-02T15:29:00.337Z","modified":"2026-07-02T18:29:39.258754727Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"RHSA-2018:2511","title":"Red Hat Security Advisory: rh-postgresql95-postgresql security update","status":"published","published":"2024-09-13T16:52:18Z","modified":"2026-08-05T10:05:33Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:2566","title":"Red Hat Security Advisory: rh-postgresql96-postgresql security update","status":"published","published":"2024-09-13T16:52:24Z","modified":"2026-08-05T10:05:37Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:3816","title":"Red Hat Security Advisory: CloudForms 4.6.6 security, bug fix and enhancement update","status":"published","published":"2024-09-13T16:54:07Z","modified":"2026-08-05T10:05:51Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-1058","description":"A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.","status":"published","published":"2018-02-28T00:00:00Z","modified":"2026-04-22T11:40:42.709791Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"MGASA-2018-0446","title":"Updated postgresql9.4|6 packages fix security vulnerabilities","description":"A flaw was found in the way Postgresql allowed a user to modify the\nbehavior of a query for other users. An attacker with a user account\ncould use this flaw to execute code with the permissions of superuser in\nthe database (CVE-2018-1058).\n\nPostgresql 9.6.x before 9.6.9 is vulnerable in the adminpack extension,\nthe pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs\nthan pg_rorate_logfile. If the adminpack is added to a database, an\nattacker able to connect to it could exploit this to force log rotation\n(CVE-2018-1115).\n\nAndrew Krasichkov discovered that libpq did not reset all its connection\nstate during reconnects (CVE-2018-10915).\n\nIt was discovered that some \"CREATE TABLE\" statements could disclose\nserver memory (CVE-2018-10925).\n\nFully fixing these security issues requires manual intervention.  See\nthe upstream advisories for details.\n","status":"published","published":"2018-11-15T22:04:32Z","modified":"2026-04-16T06:25:43.242988846Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:11184-1","title":"postgresql10-10.18-1.3 on GA media","description":"These are all security issues fixed in the postgresql10-10.18-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:15:59.478865Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2026:11167-1","title":"kubectl-cnpg-1.29.2-1.1 on GA media","description":"These are all security issues fixed in the kubectl-cnpg-1.29.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-01T00:00:00Z","modified":"2026-07-02T18:24:17.798281758Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"SUSE-SU-2018:0755-1","title":"Security update for postgresql94","description":"This update for postgresql94 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1058: Fixed uncontrolled search path element in pg_dump and other client applications (bsc#1081925).\n\n\nBug fixes:\n\n- See release notes for details:\n  * https://www.postgresql.org/docs/9.4/static/release-9-4-17.html\n  * https://www.postgresql.org/docs/9.4/static/release-9-4-16.html\n","status":"published","published":"2018-03-21T09:27:48Z","modified":"2026-02-04T04:06:02.165034Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0756-1","title":"Security update for postgresql96","description":"This update for postgresql96 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1058: Fixed uncontrolled search path element in pg_dump and other client applications (bsc#1081925).\n\n\nBug fixes:\n\n- See release notes for details:\n  * https://www.postgresql.org/docs/9.6/static/release-9-6-8.html\n","status":"published","published":"2018-03-21T09:28:54Z","modified":"2026-02-04T03:54:28.020402Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0876-1","title":"Security update for postgresql94","description":"This update for postgresql94 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1058: Fixed uncontrolled search path element in pg_dump and other client applications (bsc#1081925).\n\n\nBug fixes:\n\n- See release notes for details:\n  * https://www.postgresql.org/docs/9.4/static/release-9-4-17.html\n  * https://www.postgresql.org/docs/9.4/static/release-9-4-16.html\n","status":"published","published":"2018-04-05T15:23:52Z","modified":"2025-05-02T04:07:22.04341Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3589-1","title":"postgresql-9.3, postgresql-9.5, postgresql-9.6 vulnerability","description":"It was discovered that PostgreSQL incorrectly handled certain settings.\nAn attacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2018-03-06T08:36:36Z","modified":"2026-04-22T09:45:11.665467Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}