CVE-2017-12172 — MEDIUM (6.7)

Vulnerability Description

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.

CVSS Score

6.7

MEDIUM

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Postgresql	Postgresql	9.2

Related Weaknesses (CWE)

CWE-59

References

http://www.securityfocus.com/bid/101949Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039752Third Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2017:3402Issue TrackingThird Party Advisory
https://access.redhat.com/errata/RHSA-2017:3403Issue TrackingThird Party Advisory
https://access.redhat.com/errata/RHSA-2017:3404Issue TrackingThird Party Advisory
https://access.redhat.com/errata/RHSA-2017:3405Issue TrackingThird Party Advisory
https://www.postgresql.org/about/news/1801/Issue TrackingVendor Advisory
https://www.postgresql.org/support/security/Issue TrackingVendor Advisory
http://www.securityfocus.com/bid/101949Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039752Third Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2017:3402Issue TrackingThird Party Advisory
https://access.redhat.com/errata/RHSA-2017:3403Issue TrackingThird Party Advisory
https://access.redhat.com/errata/RHSA-2017:3404Issue TrackingThird Party Advisory
https://access.redhat.com/errata/RHSA-2017:3405Issue TrackingThird Party Advisory
https://www.postgresql.org/about/news/1801/Issue TrackingVendor Advisory

FAQ

What is CVE-2017-12172?

CVE-2017-12172 is a vulnerability with a CVSS score of 6.7 (MEDIUM). PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database sup...

How severe is CVE-2017-12172?

CVE-2017-12172 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-12172?

Check the references section above for vendor advisories and patch information. Affected products include: Postgresql Postgresql.