{"schemaVersion":3,"id":"CVE-2018-10915","aliases":["ALPINE-CVE-2018-10915","SUSE-SU-2018:3287-1","SUSE-SU-2018:3909-1","RHSA-2018:2557","UBUNTU-CVE-2018-10915","DLA-1464-1"],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with \"host\" or \"hostaddr\" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected.","dates":{"published":"2018-08-09T20:00:00.000Z","modified":"2024-08-05T07:54:36.359Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.5,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"CVE.org","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":8.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6,"severity":"medium","vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Alpine","score":7.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":4.1,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Red hat","score":8.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":4.6,"impact":10,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":8.5,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":4.6,"impact":10,"computed":true}]},"epss":{"probability":0.05089,"percentile":0.92253,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":-0.06500000000000047,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.05154},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05089,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05089,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05089,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05089,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05089,"percentile":0.92253}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05154,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05089,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05089,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05089,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05089,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05089,"percentile":0.92253}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-89","name":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","description":"The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/89.html"},{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"},{"id":"CWE-665","name":"Improper Initialization","description":"The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/665.html"}],"affected":[{"vendor":"alpine","product":"postgresql","name":"postgresql","label":"postgresql","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql","purlType":"apk","versions":[{"text":"≥ 9.3.0, < 10.5-r0","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.3.0, < 9.6.10-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.3.0, < 10.5-r0 | ≥ 9.3.0, < 9.6.10-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql14","name":"postgresql14","label":"postgresql14","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql14","purlType":"apk","versions":[{"text":"< 10.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.5-r0","eol":null,"hubHref":null},{"vendor":"alpine","product":"postgresql15","name":"postgresql15","label":"postgresql15","ecosystem":"Alpine Linux","cpePart":null,"purl":"pkg:apk/alpine/postgresql15","purlType":"apk","versions":[{"text":"< 10.5-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.5-r0","eol":null,"hubHref":null},{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"14.04","noFixRecorded":false,"fixedIn":null},{"text":"16.04","noFixRecorded":false,"fixedIn":null},{"text":"18.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"14.04 | 16.04 | 18.04","eol":{"isEol":true,"eolDate":"2019-04-02T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"14.04","label":"14.04 'Trusty Tahr' (LTS)","eolFrom":"2019-04-02T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"14.04.6"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"postgresql-9.4","name":"postgresql-9.4","label":"postgresql-9.4","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/postgresql-9.4","purlType":"deb","versions":[{"text":"< 9.4.19-0+deb8u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-0+deb8u1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-10","name":"postgresql-10","label":"postgresql-10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-10","purlType":"deb","versions":[{"text":"< 10.5-0ubuntu0.18.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.5-0ubuntu0.18.04","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-9.3","name":"postgresql-9.3","label":"postgresql-9.3","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-9.3","purlType":"deb","versions":[{"text":"< 9.3.24-0ubuntu0.14.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.24-0ubuntu0.14.04","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"postgresql-9.5","name":"postgresql-9.5","label":"postgresql-9.5","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/postgresql-9.5","purlType":"deb","versions":[{"text":"< 9.5.14-0ubuntu0.16.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.14-0ubuntu0.16.04","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"8.0","noFixRecorded":false,"fixedIn":null},{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.0 | 9.0","eol":{"isEol":true,"eolDate":"2020-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"8","label":"8 (Jessie)","eolFrom":"2020-06-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"8.11"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"postgresql global development group","product":"postgresql","name":"PostgreSQL","label":"postgresql","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"10.5","noFixRecorded":false,"fixedIn":null},{"text":"9.6.10","noFixRecorded":false,"fixedIn":null},{"text":"9.5.14","noFixRecorded":false,"fixedIn":null},{"text":"9.4.19","noFixRecorded":false,"fixedIn":null},{"text":"9.3.24","noFixRecorded":false,"fixedIn":null}],"versionsText":"10.5 | 9.6.10 | 9.5.14 | 9.4.19 | 9.3.24","eol":null,"hubHref":"/vendor/postgresql_global_development_group/postgresql"},{"vendor":"postgresql","product":"postgresql","name":"postgresql","label":"postgresql","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 9.3.0, < 9.3.24","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.4.0, < 9.4.19","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.5.0, < 9.5.14","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.6.0, < 9.6.10","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0, < 10.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.3.0, < 9.3.24 | ≥ 9.4.0, < 9.4.19 | ≥ 9.5.0, < 9.5.14 | ≥ 9.6.0, < 9.6.10 | ≥ 10.0, < 10.5","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"postgresql","label":"PostgreSQL","category":"database"}},"hubHref":"/vendor/postgresql/postgresql"},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_eus","name":"enterprise linux server eus","label":"enterprise_linux_server_eus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.5","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"redhat","product":"openstack","name":"openstack","label":"openstack","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"12","noFixRecorded":false,"fixedIn":null},{"text":"13","noFixRecorded":false,"fixedIn":null}],"versionsText":"12 | 13","eol":null,"hubHref":"/vendor/redhat/openstack"},{"vendor":"redhat","product":"virtualization","name":"virtualization","label":"virtualization","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.0","eol":null,"hubHref":"/vendor/redhat/virtualization"},{"vendor":"redhat","product":"postgresql","name":"postgresql","label":"postgresql","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-contrib","name":"postgresql-contrib","label":"postgresql-contrib","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-contrib","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-debuginfo","name":"postgresql-debuginfo","label":"postgresql-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-debuginfo","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-devel","name":"postgresql-devel","label":"postgresql-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-devel","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-docs","name":"postgresql-docs","label":"postgresql-docs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-docs","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-libs","name":"postgresql-libs","label":"postgresql-libs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-libs","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-plperl","name":"postgresql-plperl","label":"postgresql-plperl","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-plperl","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-plpython","name":"postgresql-plpython","label":"postgresql-plpython","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-plpython","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-pltcl","name":"postgresql-pltcl","label":"postgresql-pltcl","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-pltcl","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-server","name":"postgresql-server","label":"postgresql-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-server","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-static","name":"postgresql-static","label":"postgresql-static","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-static","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-test","name":"postgresql-test","label":"postgresql-test","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-test","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"redhat","product":"postgresql-upgrade","name":"postgresql-upgrade","label":"postgresql-upgrade","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/postgresql-upgrade","purlType":"rpm","versions":[{"text":"< 0:9.2.24-1.el7_5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:9.2.24-1.el7_5","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94-libs&distro=SUSE Linux Enterprise Server 11 SP4","name":"postgresql94-libs","label":"postgresql94-libs&distro=SUSE Linux Enterprise Server 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94-libs&distro=SUSE Linux Enterprise Server 11 SP4","purlType":"rpm","versions":[{"text":"< 9.4.19-0.23.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-0.23.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94-libs&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","name":"postgresql94-libs","label":"postgresql94-libs&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94-libs&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","purlType":"rpm","versions":[{"text":"< 9.4.19-0.23.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-0.23.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94-libs&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","name":"postgresql94-libs","label":"postgresql94-libs&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94-libs&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","purlType":"rpm","versions":[{"text":"< 9.4.19-0.23.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-0.23.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94&distro=SUSE Enterprise Storage 4","name":"postgresql94","label":"postgresql94&distro=SUSE Enterprise Storage 4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94&distro=SUSE Enterprise Storage 4","purlType":"rpm","versions":[{"text":"< 9.4.19-21.22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-21.22.7","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94&distro=SUSE Linux Enterprise Server 11 SP4","name":"postgresql94","label":"postgresql94&distro=SUSE Linux Enterprise Server 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94&distro=SUSE Linux Enterprise Server 11 SP4","purlType":"rpm","versions":[{"text":"< 9.4.19-0.23.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-0.23.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","name":"postgresql94","label":"postgresql94&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 9.4.19-21.22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-21.22.7","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","name":"postgresql94","label":"postgresql94&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94&distro=SUSE Linux Enterprise Server 12 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 9.4.19-21.22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-21.22.7","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94&distro=SUSE Linux Enterprise Server 12-LTSS","name":"postgresql94","label":"postgresql94&distro=SUSE Linux Enterprise Server 12-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94&distro=SUSE Linux Enterprise Server 12-LTSS","purlType":"rpm","versions":[{"text":"< 9.4.19-21.22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-21.22.7","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","name":"postgresql94","label":"postgresql94&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","purlType":"rpm","versions":[{"text":"< 9.4.19-0.23.19.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-0.23.19.1","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"postgresql94","label":"postgresql94&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 9.4.19-21.22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-21.22.7","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","name":"postgresql94","label":"postgresql94&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2","purlType":"rpm","versions":[{"text":"< 9.4.19-21.22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-21.22.7","eol":null,"hubHref":null},{"vendor":"suse","product":"postgresql94&distro=SUSE OpenStack Cloud 7","name":"postgresql94","label":"postgresql94&distro=SUSE OpenStack Cloud 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/postgresql94&distro=SUSE OpenStack Cloud 7","purlType":"rpm","versions":[{"text":"< 9.4.19-21.22.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.19-21.22.7","eol":null,"hubHref":null}],"affectedCount":42,"eol":{"hasEol":true,"count":2},"references":[{"url":"https://security.gentoo.org/glsa/201810-08","label":"security.gentoo.org/glsa/201810-08","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2729","label":"access.redhat.com/errata/RHSA-2018:2729","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4269","label":"www.debian.org/security/2018/dsa-4269","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2643","label":"access.redhat.com/errata/RHSA-2018:2643","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2721","label":"access.redhat.com/errata/RHSA-2018:2721","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2511","label":"access.redhat.com/errata/RHSA-2018:2511","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/3744-1/","label":"usn.ubuntu.com/3744-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00012.html","label":"lists.debian.org/debian-lts-announce/2018/08/msg00012.html","hostname":"lists.debian.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2566","label":"access.redhat.com/errata/RHSA-2018:2566","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2565","label":"access.redhat.com/errata/RHSA-2018:2565","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10915","label":"bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10915","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Issue Tracking","Patch","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3816","label":"access.redhat.com/errata/RHSA-2018:3816","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.securityfocus.com/bid/105054","label":"www.securityfocus.com/bid/105054","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://www.postgresql.org/about/news/1878/","label":"www.postgresql.org/about/news/1878/","hostname":"www.postgresql.org","tags":["X Refsource CONFIRM","Vendor Advisory","ARTICLE","REPORT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2557","label":"access.redhat.com/errata/RHSA-2018:2557","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory","Advisory"]},{"url":"http://www.securitytracker.com/id/1041446","label":"www.securitytracker.com/id/1041446","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html","label":"lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-10915","label":"security.alpinelinux.org/vuln/CVE-2018-10915","hostname":"security.alpinelinux.org","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183287-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20183287-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1104199","label":"bugzilla.suse.com/1104199","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10915","label":"www.suse.com/security/cve/CVE-2018-10915","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183909-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20183909-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1609891","label":"bugzilla.redhat.com/show_bug.cgi?id=1609891","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2557.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2557.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10915","label":"access.redhat.com/security/cve/CVE-2018-10915","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10915","label":"www.cve.org/CVERecord?id=CVE-2018-10915","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10915","label":"nvd.nist.gov/vuln/detail/CVE-2018-10915","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-10915","label":"ubuntu.com/security/CVE-2018-10915","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-3744-1","label":"ubuntu.com/security/notices/USN-3744-1","hostname":"ubuntu.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-4269-1","MGASA-2018-0446","OPENSUSE-SU-2020:1227-1","OPENSUSE-SU-2024:11184-1","RHSA-2018:2511","RHSA-2018:2565","RHSA-2018:2566","RHSA-2018:2643","RHSA-2018:3816","SUSE-SU-2018:2564-1","SUSE-SU-2018:3377-1","USN-3744-1"],"duplicates":[],"related":["OPENSUSE-SU-2020:1227-1","OPENSUSE-SU-2024:11184-1","SUSE-SU-2018:2564-1","SUSE-SU-2018:3377-1","USN-3744-1"]},"timeline":[{"kind":"published","date":"2018-08-09T20:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T07:54:36.359Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T10:14:34.757Z","stale":false,"partial":false}}