CVE-2017-15099 — MEDIUM (6.5)

Vulnerability Description

INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.

CVSS Score

6.5

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Postgresql	Postgresql	9.5
Debian	Debian Linux	9.0

Related Weaknesses (CWE)

CWE-200

References

http://www.securityfocus.com/bid/101781Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039752Third Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2018:2511
https://access.redhat.com/errata/RHSA-2018:2566
https://www.debian.org/security/2017/dsa-4028Issue TrackingThird Party Advisory
https://www.postgresql.org/about/news/1801/Issue TrackingVendor Advisory
https://www.postgresql.org/support/security/Issue TrackingVendor Advisory
http://www.securityfocus.com/bid/101781Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1039752Third Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2018:2511
https://access.redhat.com/errata/RHSA-2018:2566
https://www.debian.org/security/2017/dsa-4028Issue TrackingThird Party Advisory
https://www.postgresql.org/about/news/1801/Issue TrackingVendor Advisory
https://www.postgresql.org/support/security/Issue TrackingVendor Advisory

FAQ

What is CVE-2017-15099?

CVE-2017-15099 is a vulnerability with a CVSS score of 6.5 (MEDIUM). INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits a...

How severe is CVE-2017-15099?

CVE-2017-15099 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-15099?

Check the references section above for vendor advisories and patch information. Affected products include: Postgresql Postgresql, Debian Debian Linux.