CVE-2019-10164: fedoraproject fedora Stack-based Buffer Overflow
Vulnerability summary
CVE-2019-10164 is a high (CVSS 9.0) Stack-based Buffer Overflow vulnerability in fedoraproject fedora. EPSS estimates a 3.64% chance of exploitation in the next 30 days, higher than 89.4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 10 · Related 6Timeline
- 26-06-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.
CVSS metrics
8 scores · 5 sources · 3 versions- OSV · AlpineEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.5HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
3.64%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
-0.07 pp
From 3.71% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
Affected systems
Suse37 products
- postgresql10-libs&distro=HPE Helion OpenStack 8< 10.9-1.12.1
- postgresql10-libs&distro=SUSE Enterprise Storage 4< 10.9-1.12.1
- postgresql10-libs&distro=SUSE Enterprise Storage 5< 10.9-1.12.1
- postgresql10-libs&distro=SUSE Linux Enterprise Desktop 12 SP4< 10.9-1.12.1
- postgresql10-libs&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 10.9-1.12.1
Redhat6 products
- enterprise_linux8.0
- libpq< 0:12.1-3.el8
- libpq-debuginfo< 0:12.1-3.el8
- libpq-debugsource< 0:12.1-3.el8
- libpq-devel< 0:12.1-3.el8
Alpine3 products
- postgresql≥ 10.0, < 11.4-r0 | ≥ 10.0, < 10.9-r0
- postgresql14< 11.4-r0
- postgresql15< 11.4-r0
Fedoraproject1 product
- fedoraEOL29 | 30
Mageia1 product
- postgresql11< 11.4-1.mga7
Opensuse1 product
- leapEOL15.0 | 15.1
Postgresql1 product
- postgresqlEOL10.9 | 11.4 | ≥ 10.0, < 10.9 | ≥ 11.0, < 11.4
Ubuntu1 product
- postgresql-10< 10.9-0ubuntu0.18.04.1
8 vendors · 51 products
References
25 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10164X Refsource CONFIRMIssue TrackingThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-07/msg00035.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
