CVE-2019-10129CWE-125

A vulnerability was found in postgresql versions 11.x prior to 11.3

Medium · published July 30, 2019

CVSS v3.0
6.5
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbitrary bytes of server memory. In the default configuration, any user can create a partitioned table suitable for this attack. (Exploit prerequisites are the same as for CVE-2018-1052).

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01633 · 76.0th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2019-07-30T16:10Z
EPSS history
Timeline
  • 30 JUL 16:10Z
    A vulnerability was found in postgresql versions 11.x prior to 11.3
    cvelistv5