CVE-2018-1115 - postgresql: Too-permissive access control list on function pg_logfile_rotate()

Back Back to CVE browser

CRITICAL

postgresql: Too-permissive access control list on function pg_logfile_rotate()

Published May 10, 2018

9.1

CRITICAL

CVSS 3.1

EPSS 3.90%

Description

postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.

Affected products

Vendor n/a Product PostgreSQL Default
n/a
- Version
  postegresql 10.4
  Status
  affected
  Constraints
  -
- Version
  postegresql 9.6.9
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

PostgreSQL

n/a

Version	Status	Constraints
postegresql 10.4	affected	-
postegresql 9.6.9	affected	-

Red Hat Software Collections for Red Hat Enterprise Linux 6

rh-postgresql96-postgresql-0:9.6.10-1.el6

Fixed · RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS

rh-postgresql96-postgresql-0:9.6.10-1.el6

Fixed · RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux 7

rh-postgresql10-postgresql-0:10.5-1.el7

Fixed · RHSA-2018:2565
Red Hat Software Collections for Red Hat Enterprise Linux 7

rh-postgresql96-postgresql-0:9.6.10-1.el7

Fixed · RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS

rh-postgresql10-postgresql-0:10.5-1.el7

Fixed · RHSA-2018:2565
Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS

rh-postgresql96-postgresql-0:9.6.10-1.el7

Fixed · RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS

rh-postgresql10-postgresql-0:10.5-1.el7

Fixed · RHSA-2018:2565
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS

rh-postgresql96-postgresql-0:9.6.10-1.el7

Fixed · RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS

rh-postgresql10-postgresql-0:10.5-1.el7

Fixed · RHSA-2018:2565
Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS

rh-postgresql96-postgresql-0:9.6.10-1.el7

Fixed · RHSA-2018:2566
CloudForms Management Engine 5

postgresql94

Not affected
CloudForms Management Engine 5

rh-postgresql95-postgresql

Not affected
Red Hat Enterprise Linux 5

postgresql

Not affected
Red Hat Enterprise Linux 5

postgresql84

Not affected
Red Hat Enterprise Linux 6

postgresql

Not affected
Red Hat Enterprise Linux 7

postgresql

Not affected
Red Hat Enterprise Linux 8

postgresql

Not affected
Red Hat JBoss Fuse Service Works 6

postgresql

Not affected
Red Hat JBoss Operations Network 3

postgresql

Out of support scope
Red Hat Mobile Application Platform 4

postgresql

Not affected
Red Hat Satellite 5

postgresql95-postgresql

Not affected
Red Hat Single Sign-On 7

postgresql

Not affected
Red Hat Software Collections

rh-postgresql94-postgresql

Not affected
Red Hat Software Collections

rh-postgresql95-postgresql

Not affected

Product	Package	State	Advisory
Red Hat Software Collections for Red Hat Enterprise Linux 6	rh-postgresql96-postgresql-0:9.6.10-1.el6	Fixed	RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux 6.7 EUS	rh-postgresql96-postgresql-0:9.6.10-1.el6	Fixed	RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux 7	rh-postgresql10-postgresql-0:10.5-1.el7	Fixed	RHSA-2018:2565
Red Hat Software Collections for Red Hat Enterprise Linux 7	rh-postgresql96-postgresql-0:9.6.10-1.el7	Fixed	RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS	rh-postgresql10-postgresql-0:10.5-1.el7	Fixed	RHSA-2018:2565
Red Hat Software Collections for Red Hat Enterprise Linux 7.3 EUS	rh-postgresql96-postgresql-0:9.6.10-1.el7	Fixed	RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS	rh-postgresql10-postgresql-0:10.5-1.el7	Fixed	RHSA-2018:2565
Red Hat Software Collections for Red Hat Enterprise Linux 7.4 EUS	rh-postgresql96-postgresql-0:9.6.10-1.el7	Fixed	RHSA-2018:2566
Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS	rh-postgresql10-postgresql-0:10.5-1.el7	Fixed	RHSA-2018:2565
Red Hat Software Collections for Red Hat Enterprise Linux 7.5 EUS	rh-postgresql96-postgresql-0:9.6.10-1.el7	Fixed	RHSA-2018:2566
CloudForms Management Engine 5	postgresql94	Not affected	n/a
CloudForms Management Engine 5	rh-postgresql95-postgresql	Not affected	n/a
Red Hat Enterprise Linux 5	postgresql	Not affected	n/a
Red Hat Enterprise Linux 5	postgresql84	Not affected	n/a
Red Hat Enterprise Linux 6	postgresql	Not affected	n/a
Red Hat Enterprise Linux 7	postgresql	Not affected	n/a
Red Hat Enterprise Linux 8	postgresql	Not affected	n/a
Red Hat JBoss Fuse Service Works 6	postgresql	Not affected	n/a
Red Hat JBoss Operations Network 3	postgresql	Out of support scope	n/a
Red Hat Mobile Application Platform 4	postgresql	Not affected	n/a
Red Hat Satellite 5	postgresql95-postgresql	Not affected	n/a
Red Hat Single Sign-On 7	postgresql	Not affected	n/a
Red Hat Software Collections	rh-postgresql94-postgresql	Not affected	n/a
Red Hat Software Collections	rh-postgresql95-postgresql	Not affected	n/a

Remediation

Red Hat statement

This issue does not appear to affect the versions of postgresql as shipped with Red Hat Satellite version 5, CloudForms version 4, Red Hat Single Sign-On 7, and Fuse Service Works 6.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (12)

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html
vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://www.securityfocus.com/bid/104285
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2018:2565
vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:2566
vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2018-1115
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1573276
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1115
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-11759
Advisory
https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=7b34740
x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2018-1115
https://security.gentoo.org/glsa/201810-08
vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2018-1115

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html		vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://www.securityfocus.com/bid/104285		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2018:2565		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/errata/RHSA-2018:2566		vendor-advisoryx_refsource_REDHATThird Party Advisory
https://access.redhat.com/security/cve/CVE-2018-1115		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1573276		Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1115		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-11759		Advisory
https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commitdiff%3Bh=7b34740		x_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2018-1115
https://security.gentoo.org/glsa/201810-08		vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2018-1115