{"id":"CVE-2018-16850","aliases":["ALPINE-CVE-2018-16850","BELL-CVE-2018-16850","EUVD-2018-8644","GHSA-h6p9-49w4-8mm8","RHSA-2018:3757","SUSE-SU-2018:3770-1","SUSE-SU-2018:3770-2","SUSE-SU-2018:3942-1","UBUNTU-CVE-2018-16850","USN-3818-1","openSUSE-SU-2024:11184-1","openSUSE-SU-2024:11185-1"],"status":"published","title":"postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and...","description":"postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.","severity":{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0515,"percentile":0.92481,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-89"],"published":"2018-11-08T00:00:00Z","modified":"2026-11-03T06:31:20Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"postgresql","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"postgresql","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"postgresql","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"postgresql","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"postgresql","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"postgresql","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"postgresql14","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"postgresql14","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql14","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql14","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql14","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql14","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"postgresql15","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"postgresql15","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"postgresql15","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"postgresql15","fixed_in":["11.1-r0"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-contrib","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-contrib-syspaths","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-debuginfo","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-devel","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-docs","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-libs","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-plperl","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-plpython","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-pltcl","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-server","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-server-syspaths","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-static","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-syspaths","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-test","fixed_in":["0:10.6-1.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"postgresql10","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"postgresql10-libs","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"postgresql10-libs","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"postgresql10","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"postgresql10-libs","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql10","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql10-libs","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"postgresql10","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"postgresql10-libs","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"postgresql10-libs","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"postgresql10","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"postgresql10-libs","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"postgresql10","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"postgresql10-libs","fixed_in":["10.6-1.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"postgresql10","fixed_in":["10.6-4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"postgresql10","fixed_in":["10.6-4.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"postgresql10","fixed_in":["10.6-4.8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"postgresql-10","fixed_in":["10.6-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"10.0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"postgresql15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-r0"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-contrib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-contrib-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-plperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-plpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-pltcl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-server-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-postgresql10-postgresql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6-1.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"postgresql10-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"postgresql10-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"postgresql10-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"postgresql10-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"postgresql10-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"postgresql10-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"postgresql10-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"postgresql10-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-1.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-4.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-4.8.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"postgresql-10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-0ubuntu0.18.04.1"}]}],"versions":["10.1-1","10.1-2","10.2-1","10.3-1","10.4-0ubuntu0.18.04","10.5-0ubuntu0.18.04"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"postgresql-10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.6-0ubuntu0.18.04.1"}]}],"versions":["10.1-1","10.1-2","10.2-1","10.3-1","10.4-0ubuntu0.18.04","10.5-0ubuntu0.18.04"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.18-1.3"}]}],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"postgresql11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.13-1.3"}]}],"bundled":18}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"postgresql","product":"postgresql"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"the postgresql project","product":"postgresql"}],"references":[{"url":"https://usn.ubuntu.com/3818-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3757","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.postgresql.org/about/news/1905/","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory","article","report"]},{"url":"http://www.securitytracker.com/id/1042144","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201811-24","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Mitigation","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/105923","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16850","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16850","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-h6p9-49w4-8mm8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-16850","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-16850","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1645937","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3757.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-16850","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-16850","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183770-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1114837","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16850","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183770-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183942-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-16850","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3818-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10925","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1720","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25696","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3677","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-16850","description":"postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.","status":"published","published":"2018-11-13T15:00:00Z","modified":"2024-08-05T10:32:54.106Z","cvss":[{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:35:11.426178Z"}],"euvd":[{"id":"EUVD-2018-8644","description":"postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.","status":"published","published":"2018-11-13T15:00:00Z","modified":"2024-08-05T10:32:54Z","cvss":[{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T02:39:40.316949Z"}],"ghsa":[{"id":"GHSA-h6p9-49w4-8mm8","title":"postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and...","description":"postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.","status":"published","published":"2022-05-13T01:34:06Z","modified":"2023-01-27T05:05:52Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:42:47.147954Z"}],"nvd":[{"id":"CVE-2018-16850","description":"postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.","status":"published","published":"2018-11-13T15:29:00.233Z","modified":"2026-06-17T01:44:54.447Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:04:47.196456Z"}],"osv":[{"id":"ALPINE-CVE-2018-16850","description":"postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.","status":"published","published":"2018-11-13T15:29:00.233Z","modified":"2026-11-03T06:31:20.489952911Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:18:23.800469Z"},{"id":"BELL-CVE-2018-16850","title":"CVE-2018-16850 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:16:17.33971Z","modified":"2026-01-26T09:46:40.225268Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-16850","description":"postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.","status":"published","published":"2018-11-13T15:29:00.233Z","modified":"2026-03-15T14:29:53.400379Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:08.533609Z"},{"id":"RHSA-2018:3757","title":"Red Hat Security Advisory: rh-postgresql10-postgresql security update","status":"published","published":"2024-09-13T15:09:48Z","modified":"2026-06-29T10:23:01Z","cvss":[{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"UBUNTU-CVE-2018-16850","description":"postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.","status":"published","published":"2018-11-08T00:00:00Z","modified":"2026-04-22T11:47:22.463548Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:17.496046Z"},{"id":"openSUSE-SU-2024:11184-1","title":"postgresql10-10.18-1.3 on GA media","description":"These are all security issues fixed in the postgresql10-10.18-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:15:59.478865Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11185-1","title":"postgresql11-11.13-1.3 on GA media","description":"These are all security issues fixed in the postgresql11-11.13-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:47.930292Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:3770-1","title":"Security update for postgresql10","description":"This update for postgresql10 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-16850: Fixed improper quoting of transition table names when pg_dump emits CREATE TRIGGER could have caused privilege escalation (bsc#1114837).\n\nNon-security issues fixed:\n\n- Update to release 10.6:\n  * https://www.postgresql.org/docs/current/static/release-10-6.html\n","status":"published","published":"2018-11-15T12:45:38Z","modified":"2026-02-04T02:26:54.773458Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3770-2","title":"Security update for postgresql10","description":"This update for postgresql10 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-16850: Fixed improper quoting of transition table names when pg_dump emits CREATE TRIGGER could have caused privilege escalation (bsc#1114837).\n\nNon-security issues fixed:\n\n- Update to release 10.6:\n  * https://www.postgresql.org/docs/current/static/release-10-6.html\n","status":"published","published":"2018-12-12T10:45:26Z","modified":"2026-02-04T03:21:35.772801Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3942-1","title":"Security update for postgresql10","description":"This update for postgresql10 fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-16850: Fixed improper quoting of transition table names when pg_dump emits CREATE TRIGGER could have caused privilege escalation (bsc#1114837).                                    \n\nNon-security issues fixed:\n\n- Update to release 10.6:\n  * https://www.postgresql.org/docs/current/static/release-10-6.html\n","status":"published","published":"2018-11-29T11:39:51Z","modified":"2025-05-02T04:07:55.867089Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"USN-3818-1","title":"postgresql-10 vulnerability","description":"It was discovered that PostgreSQL incorrectly handled certain trigger\ndefinitions when running pg_upgrade or pg_dump. A remote attacker could\npossibly use this issue to execute arbitrary SQL statements with superuser\nprivileges.\n","status":"published","published":"2018-11-14T18:56:45Z","modified":"2026-04-22T09:52:00.306708Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}