CVE-2016-2193: High severity postgresql common vulnerability
Published Apr 11, 2016
·Updated
PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.
Affected Software
2 affected components
PostgreSQL postgresql=9.5
PostgreSQL postgresql=9.5.1
Remediation
Patch Available
Event History
Apr 11, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2193?
CVE-2016-2193 is considered a high-severity vulnerability due to its potential to bypass access restrictions.
2
How do I fix CVE-2016-2193?
To fix CVE-2016-2193, update PostgreSQL to version 9.5.2 or later.
3
What versions of PostgreSQL are affected by CVE-2016-2193?
CVE-2016-2193 affects PostgreSQL versions 9.5 and 9.5.1.
4
What is the impact of CVE-2016-2193?
The impact of CVE-2016-2193 allows attackers to execute queries as multiple roles, potentially exposing sensitive data.
5
Is CVE-2016-2193 relevant to all PostgreSQL deployments?
CVE-2016-2193 is particularly relevant to deployments using row-level security features in PostgreSQL.