PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

PostgreSQL optimizer statistics allow a user to read sampled data within aview that the user cannot access. Separately, statistics allow a user toread sampled data that a row security policy intended to hide. PostgreSQLmaintains statistics for tables by sampling data available in columns; thisdata is consulted during the query planning process. Prior to thisrelease, a user could craft a leaky operator that bypassed view accesscontrol lists (ACLs) and bypassed row security policies in partitioning ortable inheritance hierarchies. Reachable statistics data notably includedhistograms and most-common-values lists. CVE-2017-7484 and CVE-2019-10130intended to close this class of vulnerability, but this gap remained.Versions before PostgreSQL 17.6, 16.10, 15.14, 14.19, and 13.22 areaffected.

Where it's fixed