CVE-2019-10130

🗓️ 30 Jul 2019 16:13:46Reported by redhatType

CVE-2019-10130: PostgreSQL versions 11.x up to excluding 11.3, 10.x up to excluding 10.8, 9.6.x up to excluding 9.6.13, 9.5.x up to excluding 9.5.17 vulnerability

Reporter	Title	Published	Views	Family All 154
FreeBSD	PostgreSQL -- Selectivity estimators bypass row security policies	9 May 201900:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 10 package postgresql12 version 11.3-alt1	8 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.13-alt0.M80P.1	14 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package postgresql15 version 11.3-alt1	8 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package postgresql13 version 11.3-alt1	8 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package postgresql12 version 11.3-alt1	8 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql10 version 10.8-alt0.M80P.1	14 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql12 version 11.3-alt0.M80P.1	9 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql11 version 11.3-alt0.M80P.1	14 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package postgresql9.6 version 9.6.13-alt1	8 May 201900:00	–	altlinux

NVD

Vulners

Node

postgresql postgresqlRange9.5.0–9.5.17

postgresql postgresqlRange9.6.0–9.6.13

postgresql postgresqlRange10.0–10.8

postgresql postgresqlRange11.0–11.3

Node

opensuse leapMatch15.1

[
  {
    "product": "postgresql",
    "vendor": "PostgreSQL Project",
    "versions": [
      {
        "status": "affected",
        "version": "11.x up to, excluding 11.3"
      },
      {
        "status": "affected",
        "version": "10.x up to, excluding 10.8"
      },
      {
        "status": "affected",
        "version": "9.6.x up to, excluding 9.6.13"
      },
      {
        "status": "affected",
        "version": "9.5.x up to, excluding 9.5.17"
      }
    ]
  }
]

Source	Link
postgresql	www.postgresql.org/about/news/1939/
security	www.security.gentoo.org/glsa/202003-03
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html

21 Nov 2024 04:18Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24

CVSS 3.14.3

CVSS 33.1

EPSS0.00254

CWE-284