CVE-2017-7484: Infoleak
It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access.
Other sources
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not check privileges before consulting those statistics during query planning; an attacker can exploit this to view the most common values of arbitrary columns.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7484?
CVE-2017-7484 has been classified as a medium severity vulnerability due to the potential for information leakage.
How do I fix CVE-2017-7484?
To fix CVE-2017-7484, upgrade PostgreSQL to version 9.2.21 or higher, 9.3.17 or higher, 9.4.12 or higher, 9.5.7 or higher, or 9.6.3 or higher.
What versions of PostgreSQL are affected by CVE-2017-7484?
PostgreSQL versions before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 are affected by CVE-2017-7484.
What type of vulnerability is CVE-2017-7484?
CVE-2017-7484 is an information disclosure vulnerability that can result from improper checks on user privileges.
Can unprivileged users exploit CVE-2017-7484?
Yes, unprivileged users could exploit CVE-2017-7484 to access sensitive information from pg_statistic.