PT-2018-1986 · Postgresql · Postgresql

Published 2018-08-24 · Updated 2018-08-24

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Postgresql versions (affected versions not specified)

Description The issue is related to an error in the interaction with LDAP through parsec-calls when receiving user security attributes. This allows a remote attacker to access information about all users in the ALD domain and significantly increase the load on the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2018-01602

Affected Products

Postgresql

References · 1

• https://bdu.fstec.ru/vul/2018-01602 · Security Note