CVE-2019-10164
Fixed in a distro release EPSS 4%CVSS 7.5
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
Products: postgresql
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine:v3.10 | postgresql | 11.4-r0 |
| Alpine:v3.11 | postgresql | 11.4-r0 |
| Alpine:v3.12 | postgresql | 11.4-r0 |
| Alpine:v3.13 | postgresql | 11.4-r0 |
| Alpine:v3.14 | postgresql | 11.4-r0 |
| Alpine:v3.15 | postgresql14 | 11.4-r0 |
| Alpine:v3.16 | postgresql14 | 11.4-r0 |
| Alpine:v3.17 | postgresql14 | 11.4-r0 |
| Alpine:v3.17 | postgresql15 | 11.4-r0 |
| Alpine:v3.18 | postgresql14 | 11.4-r0 |
| Alpine:v3.18 | postgresql15 | 11.4-r0 |
| Alpine:v3.19 | postgresql15 | 11.4-r0 |
| Alpine:v3.20 | postgresql15 | 11.4-r0 |
| Alpine:v3.7 | postgresql | 10.9-r0 |
| Alpine:v3.8 | postgresql | 10.9-r0 |
| Alpine:v3.9 | postgresql | 11.4-r0 |
| Red Hat:enterprise_linux:8 | libpq | 0:12.1-3.el8 |
| Red Hat:enterprise_linux:8 | libpq-debuginfo | 0:12.1-3.el8 |
| Red Hat:enterprise_linux:8 | libpq-debugsource | 0:12.1-3.el8 |
| Red Hat:enterprise_linux:8 | libpq-devel | 0:12.1-3.el8 |
| Red Hat:enterprise_linux:8 | libpq-devel-debuginfo | 0:12.1-3.el8 |
| Red Hat:enterprise_linux:8 | postgresql | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-contrib | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-contrib-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-debugsource | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-docs | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-docs-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-plperl | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-plperl-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-plpython3 | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-plpython3-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-pltcl | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-pltcl-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-server | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-server-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-server-devel | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-server-devel-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-static | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-test | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-test-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-test-rpm-macros | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-upgrade | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-upgrade-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-upgrade-devel | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:enterprise_linux:8 | postgresql-upgrade-devel-debuginfo | 0:10.14-1.module+el8.2.0+7801+be0fed80 |
| Red Hat:rhel_e4s:8.0 | postgresql | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-contrib | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-contrib-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-debugsource | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-docs | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-docs-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-plperl | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-plperl-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-plpython3 | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-plpython3-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-pltcl | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-pltcl-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-server | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-server-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-server-devel | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-server-devel-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-static | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-test | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-test-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-test-rpm-macros | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-upgrade | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-upgrade-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-upgrade-devel | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_e4s:8.0 | postgresql-upgrade-devel-debuginfo | 0:10.15-1.module+el8.0.0+9155+4a85661a |
| Red Hat:rhel_eus:8.1 | postgresql | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-contrib | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-contrib-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-debugsource | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-docs | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-docs-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-plperl | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-plperl-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-plpython3 | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-plpython3-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-pltcl | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-pltcl-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-server | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-server-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-server-devel | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-server-devel-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-static | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-test | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-test-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-test-rpm-macros | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-upgrade | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-upgrade-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-upgrade-devel | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_eus:8.1 | postgresql-upgrade-devel-debuginfo | 0:10.15-1.module+el8.1.0+9154+cd474635 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-contrib | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-contrib-syspaths | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-debuginfo | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-devel | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-docs | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-libs | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-plperl | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-plpython | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-pltcl | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-server | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-server-syspaths | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-static | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-syspaths | 0:10.12-2.el7 |
| Red Hat:rhel_software_collections:3 | rh-postgresql10-postgresql-test | 0:10.12-2.el7 |
| SUSE:Enterprise Storage 4 | postgresql10 | 10.9-1.12.2 |
| SUSE:Enterprise Storage 4 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Enterprise Storage 5 | postgresql10 | 10.9-1.12.2 |
| SUSE:Enterprise Storage 5 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:HPE Helion OpenStack 8 | postgresql10 | 10.9-1.12.2 |
| SUSE:HPE Helion OpenStack 8 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Desktop 12 SP4 | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Desktop 12 SP4 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 | postgresql10 | 10.9-4.13.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP1 | postgresql | 12-8.11.3 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP1 | postgresql10 | 10.12-8.13.9 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP1 | postgresql10 | 10.9-8.3.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP1 | postgresql12 | 12.2-3.5.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP1 | postgresql12-libs | 12.2-3.5.2 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP1 | python-psycopg2 | 2.8.4-5.4.6 |
| SUSE:Linux Enterprise Module for Package Hub 15 | postgresql10 | 10.9-4.13.2 |
| SUSE:Linux Enterprise Module for Server Applications 15 | postgresql10 | 10.9-4.13.2 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP1 | postgresql | 12-8.11.3 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP1 | postgresql10 | 10.12-8.13.9 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP1 | postgresql10 | 10.9-8.3.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP1 | postgresql12 | 12.2-3.5.2 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP1 | postgresql12-libs | 12.2-3.5.2 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server 12 SP2-BCL | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Server 12 SP3-BCL | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server 12 SP3-BCL | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server 12 SP3-LTSS | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Server 12 SP4 | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server 12 SP4 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Server 12-LTSS | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server 12-LTSS | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | postgresql10 | 10.9-1.12.2 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP4 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:OpenStack Cloud 7 | postgresql10 | 10.9-1.12.2 |
| SUSE:OpenStack Cloud 7 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:OpenStack Cloud 8 | postgresql10 | 10.9-1.12.2 |
| SUSE:OpenStack Cloud 8 | postgresql10-libs | 10.9-1.12.1 |
| SUSE:OpenStack Cloud Crowbar 8 | postgresql10 | 10.9-1.12.2 |
| SUSE:OpenStack Cloud Crowbar 8 | postgresql10-libs | 10.9-1.12.1 |
| Ubuntu:18.04:LTS | postgresql-10 | 10.9-0ubuntu0.18.04.1 |
| openSUSE:Leap 15.0 | postgresql10 | 10.9-lp151.2.3.1 |
| openSUSE:Leap 15.1 | postgresql10 | 10.9-lp151.2.3.1 |
| openSUSE:Tumbleweed | postgresql10 | 10.18-1.3 |
| openSUSE:Tumbleweed | postgresql11 | 11.13-1.3 |