CVE-2018-10915: Infoleak
A flaw was found in PostgreSQL. The chief PostgreSQL client library, libpq, does not adequately reset its internal state before each connection attempt. When one requests a connection using a "host" or "hostaddr" connection parameter provided by an untrusted party, that party can thwart three security-relevant features of the client. First, they can cause PQconnectionUsedPassword() to erroneously return true. Users of contrib module "dblink" or "postgresfdw" can leverage that to use server-side login credentials that they should not be able to use. Second, attackers can cause the PQescape() family of functions to malfunction, permitting SQL injection in "postgresfdw" and likely in other applications. Third, attackers can cause sslmode=prefer to not attempt SSL/TLS at all
Other sources
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq were used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2018-10915.
What is the severity level of vulnerability CVE-2018-10915?
The severity level of vulnerability CVE-2018-10915 is high with a CVSS score of 8.5.
Which software versions are affected by CVE-2018-10915?
The affected software versions are PostgreSQL versions 9.3.0 to 9.3.24, 9.4.0 to 9.4.19, 9.5.0 to 9.5.14, 9.6.0 to 9.6.10, and 10.0 to 10.5.
How can I fix vulnerability CVE-2018-10915?
To fix vulnerability CVE-2018-10915, you need to update to PostgreSQL versions 9.3.25, 9.4.20, 9.5.15, 9.6.11, or 10.6, depending on the version you are using.
Where can I find more information about vulnerability CVE-2018-10915?
You can find more information about vulnerability CVE-2018-10915 on the PostgreSQL website and the Red Hat Bugzilla page.