CVE-2018-1115: Critical severity PostgreSQL postgresql vulnerability
postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pgcatalog.pglogfilerotate() function doesn't follow the same ACLs than pgroratelogfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.
Other sources
PostgreSQL contrib module "adminpack" installs function pglogfilerotate(), a deprecated alias for built-in function pgrotatelogfile(). By default, only superusers can execute pgrotatelogfile(), but anyone can execute pglogfilerotate(). In certain configurations, an attacker could use this to crash the server or distribute log messages across more log files than the administrator wished.
Vulnerable Versions: 9.6, 10
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-1115?
CVE-2018-1115 is a vulnerability in PostgreSQL before versions 10.4 and 9.6.9 where the adminpack extension is vulnerable to log rotation exploit.
How severe is CVE-2018-1115?
CVE-2018-1115 has a severity score of 9.1, which is categorized as critical.
What is the affected software for CVE-2018-1115?
The affected software for CVE-2018-1115 includes PostgreSQL versions before 10.4 and 9.6.9 as well as openSUSE Leap 15.1.
What is the remedy for CVE-2018-1115?
The remedy for CVE-2018-1115 is to update affected PostgreSQL versions to 10.4 or 9.6.9, or to update openSUSE Leap 15.1.
How can an attacker exploit CVE-2018-1115?
An attacker who is able to connect to a database with the adminpack extension can exploit CVE-2018-1115 to force log rotation.