PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.
Fix
Patch, vendor advisory and mitigation references on NVD 4
- https://www.postgresql.org/about/news/1801/ Issue Tracking, Vendor Advisory
- https://www.postgresql.org/support/security/ Issue Tracking, Vendor Advisory
- https://www.postgresql.org/about/news/1801/ Issue Tracking, Vendor Advisory
- https://www.postgresql.org/support/security/ Issue Tracking, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.7 · postgresqlNVD modified 2026-10-15 16:17
Affected (CPE criteria) 76
cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.1:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.2:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.3:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.4:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.5:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.6:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.7:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.8:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.9:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.10:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.11:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.12:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.13:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.14:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.15:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.16:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.17:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.18:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.19:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.20:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.21:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.22:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.2.23:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.1:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.2:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.3:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.4:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.5:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.6:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.7:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.8:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.9:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.10:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.11:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.12:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.13:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.14:*:*:*:*:*:*:*cpe:2.3:a:postgresql:postgresql:9.3.15:*:*:*:*:*:*:*- and 36 more
References 16
- http://www.securityfocus.com/bid/101949 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039752 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:3402 Issue Tracking, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3403 Issue Tracking, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3404 Issue Tracking, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3405 Issue Tracking, Third Party Advisory
- https://www.postgresql.org/about/news/1801/ Issue Tracking, Vendor Advisory
- https://www.postgresql.org/support/security/ Issue Tracking, Vendor Advisory
- http://www.securityfocus.com/bid/101949 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039752 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:3402 Issue Tracking, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3403 Issue Tracking, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3404 Issue Tracking, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2017:3405 Issue Tracking, Third Party Advisory
- https://www.postgresql.org/about/news/1801/ Issue Tracking, Vendor Advisory
- https://www.postgresql.org/support/security/ Issue Tracking, Vendor Advisory