CVE-2019-10164CWE-121

PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow

High · published June 26, 2019

CVSS v3.0
7.5
EPSS
4%
Percentile
89.5
In the wild
Unconfirmed
What it is

PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03643 · 89.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2019-06-26T15:29Z
EPSS history
Timeline
  • 26 JUN 15:29Z
    PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow
    cvelistv5