CVE-2018-16850: canonical ubuntu_linux SQL Injection
CVSS: 9.8v3.1CriticalModified
AliasesALPINE-CVE-2018-16850SUSE-SU-2018:3770-1SUSE-SU-2018:3770-2SUSE-SU-2018:3942-1RHSA-2018:3757UBUNTU-CVE-2018-16850USN-3818-1
Published 13-11-2018Last modified 05-08-2024
Vulnerability summary
CVE-2018-16850 is a critical (CVSS 9.8) SQL Injection vulnerability in canonical ubuntu_linux. EPSS estimates a 5.15% chance of exploitation in the next 30 days, higher than 92.3% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (NVD)EPSS score
5.15%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 13-11-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.
CVSS metrics
8 scores · 5 sources · 3 versionsCritical 9.8Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 8.0Preferred score · CVE.org (CNA)
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HSources4 sources · 8.0–9.8
- NVDNIST8.0HighCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated8.0HighCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HDiffers
High 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
5.15%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 5.15% on 18-09-2026
18-09-202618-10-2026
EPSS score5.15%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse17 products
- postgresql10-libs&distro=SUSE Linux Enterprise Desktop 12 SP3< 10.6-1.6.1
- postgresql10-libs&distro=SUSE Linux Enterprise Desktop 12 SP4< 10.6-1.6.1
- postgresql10-libs&distro=SUSE Linux Enterprise Server 12 SP3< 10.6-1.6.1
- postgresql10-libs&distro=SUSE Linux Enterprise Server 12 SP4< 10.6-1.6.1
- postgresql10-libs&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 10.6-1.6.1
Redhat16 products
- enterprise_linuxEOL7.0 | 7.4 | 7.5 | 7.6
- rh-postgresql10-postgresql< 0:10.6-1.el7
- rh-postgresql10-postgresql-contrib< 0:10.6-1.el7
- rh-postgresql10-postgresql-contrib-syspaths< 0:10.6-1.el7
- rh-postgresql10-postgresql-debuginfo< 0:10.6-1.el7
Alpine3 products
- postgresql≥ 10.0, < 11.1-r0
- postgresql14< 11.1-r0
- postgresql15< 11.1-r0
Canonical1 product
- ubuntu_linuxEOL18.04 | 18.10
Postgresql1 product
- postgresql≥ 10.0, < 10.6 | ≥ 11.0, < 11.1
The postgresql project1 product
- postgresql11.1 | 10.6
Ubuntu1 product
- postgresql-10< 10.6-0ubuntu0.18.04.1
7 vendors · 40 products
References
21 links- access.redhat.com/errata/RHSA-2018:3757Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16850X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
