REDHAT-BUG-522092: Medium severity postgresql common vulnerability
Quoting upstream PostgreSQL security page: http://www.postgresql.org/support/security.html
Authenticated non-superusers can shut down the backend server by re-LOAD-ing libraries in $libdir/plugins, if any libraries are present there.
Affected versions: 8.4, 8.3, 8.2
Fixed in versions: 8.4.1, 8.3.8, 8.2.14
Severity: D - A vulnerability that is exploitable for denial-of-service, but requiring a valid prior login.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-522092?
The severity of REDHAT-BUG-522092 is classified as medium, with a score of 4.
How does REDHAT-BUG-522092 affect PostgreSQL users?
REDHAT-BUG-522092 allows authenticated non-superusers to shut down the PostgreSQL backend server by re-loading libraries in $libdir/plugins.
Which versions of PostgreSQL are affected by REDHAT-BUG-522092?
Affected versions by REDHAT-BUG-522092 include PostgreSQL 8.4, 8.3, and 8.2.
How can I resolve the issue identified in REDHAT-BUG-522092?
To resolve REDHAT-BUG-522092, upgrade to PostgreSQL versions 8.4.1, 8.3.8, or higher.
What should I do if I cannot upgrade my PostgreSQL installation in response to REDHAT-BUG-522092?
If unable to upgrade, consider restricting the privileges of non-superusers to prevent them from re-loading libraries.