CVE-2019-10128

🗓️ 19 Mar 2021 19:15:11Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 135 Views

A vulnerability in postgresql versions 11.x prior to 11.3 allows local attacker to bypass read access limitations and execute arbitrary code

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2019-10128	19 Mar 202123:33	–	circl
CNVD	PostgreSQL Code Execution Vulnerability (CNVD-2019-16484)	14 May 201900:00	–	cnvd
Cvelist	CVE-2019-10128	19 Mar 202119:15	–	cvelist
IBM Security Bulletins	Security Bulletin: PostgreSQL vulnerabilities in IBM Robotic Process Automation with Automation Anywhere	13 Apr 202022:57	–	ibm
Debian CVE	CVE-2019-10128	19 Mar 202119:15	–	debiancve
EUVD	EUVD-2019-2170	7 Oct 202500:30	–	euvd
F5 Networks	K000148898: PostgreSQL vulnerabilities CVE-2021-23214, CVE-2019-9193, CVE-2019-10210, CVE-2019-10128, and CVE-2019-10127	7 Dec 202401:52	–	f5
Kaspersky	KLA11572 Multiple vulnerabilities in PostgreSQL	9 May 201900:00	–	kaspersky
NVD	CVE-2019-10128	19 Mar 202120:15	–	nvd
OpenVAS	PostgreSQL 9.4.x < 9.4.22, 9.5.x < 9.5.17, 9.6.x < 9.6.13, 10.x < 10.8, 11.x < 11.3 Code Execution Vulnerability - Windows	1 Aug 201900:00	–	openvas

NVD

Vulners

Node

postgresql postgresqlRange<9.4.22

postgresql postgresqlRange9.5.0–9.5.17

postgresql postgresqlRange9.6.0–9.6.13

postgresql postgresqlRange10.0–10.8

postgresql postgresqlRange11.0–11.3

AND

microsoft windowsMatch-

[
  {
    "product": "postgresql",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "11.x prior to 11.3"
      }
    ]
  }
]

Source	Link
postgresql	www.postgresql.org/about/news/1939/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20210430-0004/

21 Nov 2024 04:18Current

7.7High risk

Vulners AI Score7.7

CVSS 24.1

CVSS 3.17.8

EPSS0.00065

CWE-284