KLA11014 Mupltiple vulnerabilities in PostgreSQL

Multiple serious vulnerabilities have been found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An incorrect check of user privileges in some selectivity estimation functions can be exploited remotely possibly to bypass security restrictions or obtain sensitive information;
2. An issue with enforcing a SSL/TLS connection which is done by the PGREQUIRESSL environment variable can be exploited remotely possibly to bypass security restrictions or obtain sensitive information;
3. An improper implementation of pg_user_mappings access qualifications can be exploited remotely to obtain sensitive information.

Technical details

Vulnerability (1) is related to providing information from pg_static.

NB: These vulnerabilities don’t have any public CVSS ratings so rating can be changed by the time.

Original advisories

PostgreSQL Security Update Release

Related products

PostgreSQL

CVE list

CVE-2017-7484 warning

CVE-2017-7485 warning

CVE-2017-7486 warning

Solution

Update to the latest version

Download PostgreSQL

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• PostgreSQL 9.2.x before 9.2.21PostgreSQL 9.3.x before 9.3.17PostgreSQL 9.4.x before 9.4.12PostgreSQL 9.5.x before 9.5.7PostgreSQL 9.6.x before 9.6.3