Vulnerability in core server (CVE-2018-16850)

🗓️ 08 Nov 2018 00:00:00Reported by PostgreSQL Global Development GroupType

Vulnerability in core server allows SQL injection through CREATE TRIGGER in upgrade and dump functions.

Reporter	Title	Published	Views	Family All 73
ALT Linux	Security fix for the ALT Linux 8 package postgresql10 version 10.6-alt0.M80P.1	11 Dec 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql11 version 11.1-alt0.M80P.1	11 Dec 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql11-1C version 10.6-alt0.M80P.1	8 Nov 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package postgresql12 version 11.1-alt1	8 Nov 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql12 version 11.1-alt0.M80P.1	8 Nov 201800:00	–	altlinux
FreeBSD	PostgreSQL -- SQL injection in pg_upgrade and pg_dump	8 Nov 201800:00	–	freebsd
AlpineLinux	CVE-2018-16850	13 Nov 201815:00	–	alpinelinux
Broadcom	CVE-2018-16850 - SQL injection in pg_upgrade and pg_dump, via CREATE TRIGGER ... REFERENCING.	19 May 202300:00	–	broadcom
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Access Manager Appliance	21 Jun 201920:05	–	ibm
CNVD	PostgreSQL 'pg_upgrade' and 'pg_dump' Functions SQL Injection Vulnerability	15 Nov 201800:00	–	cnvd