Read the docs
TI-2018-07727 Aliases CVE-2018-10915GHSA-q7vw-gjh3-qf97

Information disclosure in postgresql

Priority MEDIUM 45CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Information disclosure, SQL injection
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 21 fixed, 3 without a fix

Attack profile from CVSS 3.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-200 and CWE-89.

Summary

A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.

Why it matters now

EPSS 0.05089 92nd percentileScored 2026-11-07
Fix Partial Red Hat: 6 advisoriesRed Hat: 21 fixed, 3 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
PostgreSQLpostgresql10.5; 9.6.10; 9.5.14; 9.4.19; 9.3.24—No fix listedCNA
  • postgresql VendorPostgreSQL Affected 10.5; 9.6.10; 9.5.14; 9.4.19; 9.3.24 Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:*12VulnerableRed Hat
cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*13VulnerableRed Hat
cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
  • cpe:2.3:a:redhat:openstack:12:*:*:*:*:*:*:* Versions 12 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:* Versions 13 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*9.3.0 to before 9.3.24; 9.4.0 to before 9.4.19; 9.5.0 to before 9.5.14; 9.6.0 to before 9.6.10; 10.0 to before 10.5VulnerablePostgreSQL
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* Versions 9.3.0 to before 9.3.24; 9.4.0 to before 9.4.19; 9.5.0 to before 9.5.14; 9.6.0 to before 9.6.10; 10.0 to before 10.5 Vulnerable ·PostgreSQL

Remediation

Red Hat 6 advisories

  • RHSA-2018:3816 Released 2018-12-13 · Red Hat rating Important
    CloudForms 4.6.6 security, bug fix and enhancement update
    • CloudForms Management Engine 5.9 cfme-5.9.6.5-3.el7cf, cfme-amazon-smartstate-5.9.6.5-2.el7cf, cfme-appliance-5.9.6.5-1.el7cf +15
  • RHSA-2018:2643 Released 2018-09-04 · Red Hat rating Important
    rhvm-appliance security update
    • Red Hat Virtualization 4 Hypervisor for RHEL 7 rhvm-appliance-2:4.2-20180828.0.el7
    • Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts rhvm-appliance-2:4.2-20180828.0.el7
  • RHSA-2018:2566 Released 2018-08-27 · Red Hat rating Important
    rh-postgresql96-postgresql security update
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-postgresql96-postgresql-9.6.10-1.el6, rh-postgresql96-postgresql-contrib-9.6.10-1.el6, rh-postgresql96-postgresql-contrib-syspaths-9.6.10-1.el6 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql96-postgresql-9.6.10-1.el7, rh-postgresql96-postgresql-contrib-9.6.10-1.el7, rh-postgresql96-postgresql-contrib-syspaths-9.6.10-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-postgresql96-postgresql-9.6.10-1.el6, rh-postgresql96-postgresql-contrib-9.6.10-1.el6, rh-postgresql96-postgresql-contrib-syspaths-9.6.10-1.el6 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-postgresql96-postgresql-9.6.10-1.el7, rh-postgresql96-postgresql-contrib-9.6.10-1.el7, rh-postgresql96-postgresql-contrib-syspaths-9.6.10-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-postgresql96-postgresql-9.6.10-1.el7, rh-postgresql96-postgresql-contrib-9.6.10-1.el7, rh-postgresql96-postgresql-contrib-syspaths-9.6.10-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-postgresql96-postgresql-9.6.10-1.el7, rh-postgresql96-postgresql-contrib-9.6.10-1.el7, rh-postgresql96-postgresql-contrib-syspaths-9.6.10-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-postgresql96-postgresql-9.6.10-1.el6, rh-postgresql96-postgresql-contrib-9.6.10-1.el6, rh-postgresql96-postgresql-contrib-syspaths-9.6.10-1.el6 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql96-postgresql-9.6.10-1.el7, rh-postgresql96-postgresql-contrib-9.6.10-1.el7, rh-postgresql96-postgresql-contrib-syspaths-9.6.10-1.el7 +11
Show 3 more Red Hat advisories
  • RHSA-2018:2565 Released 2018-08-27 · Red Hat rating Important
    rh-postgresql10-postgresql security update
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql10-postgresql-10.5-1.el7, rh-postgresql10-postgresql-contrib-10.5-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.5-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-postgresql10-postgresql-10.5-1.el7, rh-postgresql10-postgresql-contrib-10.5-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.5-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-postgresql10-postgresql-10.5-1.el7, rh-postgresql10-postgresql-contrib-10.5-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.5-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-postgresql10-postgresql-10.5-1.el7, rh-postgresql10-postgresql-contrib-10.5-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.5-1.el7 +11
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql10-postgresql-10.5-1.el7, rh-postgresql10-postgresql-contrib-10.5-1.el7, rh-postgresql10-postgresql-contrib-syspaths-10.5-1.el7 +11
  • RHSA-2018:2557 Released 2018-08-23 · Red Hat rating Important
    postgresql security update
    • Red Hat Enterprise Linux Client (v. 7) postgresql-9.2.24-1.el7_5, postgresql-libs-9.2.24-1.el7_5
    • Red Hat Enterprise Linux Client Optional (v. 7) postgresql-9.2.24-1.el7_5, postgresql-contrib-9.2.24-1.el7_5, postgresql-devel-9.2.24-1.el7_5 +8
    • Red Hat Enterprise Linux ComputeNode (v. 7) postgresql-9.2.24-1.el7_5, postgresql-libs-9.2.24-1.el7_5
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) postgresql-9.2.24-1.el7_5, postgresql-contrib-9.2.24-1.el7_5, postgresql-devel-9.2.24-1.el7_5 +8
    • Red Hat Enterprise Linux Server (v. 7) postgresql-9.2.24-1.el7_5, postgresql-9.2.24-1.el7_5.ppc, postgresql-contrib-9.2.24-1.el7_5 +10
    • Red Hat Enterprise Linux Server Optional (v. 7) postgresql-static-9.2.24-1.el7_5, postgresql-static-9.2.24-1.el7_5.ppc, postgresql-upgrade-9.2.24-1.el7_5
    • Red Hat Enterprise Linux Workstation (v. 7) postgresql-9.2.24-1.el7_5, postgresql-contrib-9.2.24-1.el7_5, postgresql-devel-9.2.24-1.el7_5 +7
    • Red Hat Enterprise Linux Workstation Optional (v. 7) postgresql-static-9.2.24-1.el7_5, postgresql-upgrade-9.2.24-1.el7_5
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) postgresql-9.2.24-1.el7_5, postgresql-contrib-9.2.24-1.el7_5, postgresql-devel-9.2.24-1.el7_5 +7
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) postgresql-static-9.2.24-1.el7_5, postgresql-upgrade-9.2.24-1.el7_5
  • RHSA-2018:2511 Released 2018-08-20 · Red Hat rating Important
    rh-postgresql95-postgresql security update
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-postgresql95-postgresql-9.5.14-1.el6, rh-postgresql95-postgresql-contrib-9.5.14-1.el6, rh-postgresql95-postgresql-devel-9.5.14-1.el6 +8
    • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql95-postgresql-9.5.14-1.el7, rh-postgresql95-postgresql-contrib-9.5.14-1.el7, rh-postgresql95-postgresql-devel-9.5.14-1.el7 +8
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-postgresql95-postgresql-9.5.14-1.el6, rh-postgresql95-postgresql-contrib-9.5.14-1.el6, rh-postgresql95-postgresql-devel-9.5.14-1.el6 +8
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-postgresql95-postgresql-9.5.14-1.el7, rh-postgresql95-postgresql-contrib-9.5.14-1.el7, rh-postgresql95-postgresql-devel-9.5.14-1.el7 +8
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-postgresql95-postgresql-9.5.14-1.el7, rh-postgresql95-postgresql-contrib-9.5.14-1.el7, rh-postgresql95-postgresql-devel-9.5.14-1.el7 +8
    • Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-postgresql95-postgresql-9.5.14-1.el7, rh-postgresql95-postgresql-contrib-9.5.14-1.el7, rh-postgresql95-postgresql-devel-9.5.14-1.el7 +8
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-postgresql95-postgresql-9.5.14-1.el6, rh-postgresql95-postgresql-contrib-9.5.14-1.el6, rh-postgresql95-postgresql-devel-9.5.14-1.el6 +8
    • Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql95-postgresql-9.5.14-1.el7, rh-postgresql95-postgresql-contrib-9.5.14-1.el7, rh-postgresql95-postgresql-devel-9.5.14-1.el7 +8

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    postgresql — USN-3744-1

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2018-07737 Incorrect authorization in postgresqlPriority MEDIUM 40
    Show all 2 records → Advisory →
  • Advisory ·

    postgresql — DSA-4269

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2018-07737 Incorrect authorization in postgresqlPriority MEDIUM 40
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
CloudForms Management Engine 5AffectedNo fix yet
Red Hat Ansible Tower 3AffectedNo fix yet
Red Hat Satellite 5AffectedNo fix planned: Will not fix
CloudForms Management Engine 5.9Fixed RHSA-2018:3816
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2018:2557
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2018:2557
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2018:2557
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2018:2557
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2018:2557
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2018:2557
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2018:2557
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2018:2557
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2018:2557
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2018:2557
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2018:2511, RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2018:2511, RHSA-2018:2565, RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7)Fixed RHSA-2018:2511, RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3)Fixed RHSA-2018:2511, RHSA-2018:2565, RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4)Fixed RHSA-2018:2511, RHSA-2018:2565, RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5)Fixed RHSA-2018:2511, RHSA-2018:2565, RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2018:2511, RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2018:2511, RHSA-2018:2565, RHSA-2018:2566
Red Hat Virtualization 4 Hypervisor for RHEL 7Fixed RHSA-2018:2643
Red Hat Virtualization 4 Management Agent for RHEL 7 HostsFixed RHSA-2018:2643
Not affected: 4 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 8
  • Red Hat Mobile Application Platform 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-10915
  2. 2026-10-03 Alias added: GHSA-q7vw-gjh3-qf97

References

Patch 1

Advisory 14

  • TI-2019-06651 In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and… CVSS 3.0HIGH 7.2
  • TI-2017-05187 Improper authentication in postgresql CVSS 3.0CRITICAL 9.8
  • TI-2020-15711 SQL injection in postgresql CVSS 3.1HIGH 8.8
  • TI-2013-01675 Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9… CVSS 2.0MEDIUM 6.5
  • TI-2007-03176 The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE… CVSS 2.0HIGH 9.0
  • TI-2022-01423 SQL injection in postgresql CVSS 3.1HIGH 8.8
See all 202 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences