Lucene search

K
broadcomBroadcom Security ResponseBSNSA22186
HistoryMay 19, 2023 - 12:00 a.m.

CVE-2018-16850 - SQL injection in pg_upgrade and pg_dump, via CREATE TRIGGER ... REFERENCING.

2023-05-1900:00:00
Broadcom Security Response
support.broadcom.com
10

9.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.5%

postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER … REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.More at: https://www.postgresql.org/about/news/postgresql-111-106-9611-9515-9420-and-9325-released-1905/

Products Confirmed Not Affected

No Brocade Fibre Channel Products from Broadcom products are known to be affected by this vulnerability.