PT-2018-6111 · Postgresql · Pg

Sehrope · Published 2018-06-07 · Updated 2019-10-09 · CVE-2017-16082

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: pg versions prior to 2.11.2 pg versions prior to 3.6.4 pg versions prior to 4.5.7 pg versions prior to 5.2.1 pg versions prior to 6.4.2 pg versions prior to 7.1.2

Description: A remote code execution issue was found in the pg module when a remote database or query specifies a specially crafted column name. There are two likely scenarios in which one would be vulnerable: executing unsafe, user-supplied SQL that contains a malicious column name, or connecting to an untrusted database and executing a query that returns results where any of the column names are malicious.

Recommendations:

• Version 2.x.x: Update to version 2.11.2 or later.
• Version 3.x.x: Update to version 3.6.4 or later.
• Version 4.x.x: Update to version 4.5.7 or later.
• Version 5.x.x: Update to version 5.2.1 or later.
• Version 6.x.x: Update to version 6.4.2 or later.
• Version 7.x.x: Update to version 7.1.2 or later.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2017-16082

GHSA-WC9V-MJ63-M9G5

Affected Products

Pg

References · 13

• 🔥 https://github.com/nulldreams/CVE-2017-16082 · Exploit
• 🔥 https://nodesecurity.io/advisories/521 · Exploit
• 🔥 https://node-postgres.com/announcements#2017-08-12-code-execution-vulnerability · Exploit
• https://osv.dev/vulnerability/GHSA-wc9v-mj63-m9g5 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-16082 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-16082 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-16082 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-16082 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-16082 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-16082 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-16082 · Vendor Advisory
• https://github.com/advisories/GHSA-wc9v-mj63-m9g5 · Note
• https://npmjs.com/advisories/521 · Note