KLA11506 Buffer overflow vulnerability in PostgreSQL

Detect date:

06/20/2019

Severity:

High

Description:

Buffer overflow vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability via special payload during password changing process to cause denial of service.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

PostgreSQL 10.x earlier than 10.9
PostgreSQL 11.x earlier than 11.4
PostgreSQL 12.x earlier than 12 Beta 2

Solution:

Update to the latest version
Download PostgreSQL

Original advisories:

PostgreSQL 11.4, 10.9, 9.6.14, 9.5.18, 9.4.23, and 12 Beta 2 Released

Impacts:

ACE

Related products:

PostgreSQL

CVE-IDS:

CVE-2019-101649.0Critical