CVE-2018-1058
libecpg6: A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users
CVE-2018-1058 is fixed in 12 products on 1 platform, first by libecpg-compat3 10.3-1, released February 27, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1310
96th percentile
A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libecpg-compat3 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | libecpg-compat3 10.3-1 | Feb 27, 2018 |
| libecpg6 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | libecpg6 10.3-1 | Feb 27, 2018 |
| libpgtypes3 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | libpgtypes3 10.3-1 | Feb 27, 2018 |
| libpq5 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | libpq5 10.3-1 | Feb 27, 2018 |
| postgresql-10 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | postgresql-10 10.3-1 | Feb 27, 2018 |
| postgresql-client-10 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | postgresql-client-10 10.3-1 | Feb 27, 2018 |
| postgresql-doc-10 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | postgresql-doc-10 10.3-1 | Feb 27, 2018 |
| postgresql-plperl-10 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | postgresql-plperl-10 10.3-1 | Feb 27, 2018 |
| postgresql-plpython-10 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | postgresql-plpython-10 10.3-1 | Feb 27, 2018 |
| postgresql-plpython3-10 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | postgresql-plpython3-10 10.3-1 | Feb 27, 2018 |
| postgresql-pltcl-10 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | postgresql-pltcl-10 10.3-1 | Feb 27, 2018 |
| postgresql-server-dev-10 · Ubuntu 18.04.6 LTS (bionic) | 10.3-1 | postgresql-server-dev-10 10.3-1 | Feb 27, 2018 |