CVE-2020-14350: canonical ubuntu_linux Untrusted Search Path
Vulnerability summary
CVE-2020-14350 is a high (CVSS 7.3) Untrusted Search Path vulnerability in canonical ubuntu_linux. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 43.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 31 · Related 17Timeline
- 24-08-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
It was found that some PostgreSQL extensions did not use search_path safely in their installation script. An attacker with sufficient privileges could use this flaw to trick an administrator into executing a specially crafted script, during the installation or update of such extension. This affects PostgreSQL versions before 12.4, before 11.9, before 10.14, before 9.6.19, and before 9.5.23.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.53%
Chance of exploitation in the next 30 days
Percentile
44%
Versus all other CVEs
30-day change
0.00 pp
From 0.53% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu4 products
- postgresql-10< 10.14-0ubuntu0.18.04.1
- postgresql-12< 12.4-0ubuntu0.20.04.1
- postgresql-9.3All versions (No fix recorded)
- postgresql-9.5< 9.5.23-0ubuntu0.16.04.1
Alpine3 products
- postgresql≥ 9.5, < 11.9-r0 | ≥ 9.5, < 12.4-r0
- postgresql14< 12.4-r0
- postgresql15< 12.4-r0
Debian2 products
- postgresql-9.6< 9.6.19-0+deb9u1
- debian_linuxEOL9.0
Canonical1 product
- ubuntu_linuxEOL16.04 | 18.04 | 20.04
Opensuse1 product
- leapEOL15.1 | 15.2
Postgresql1 product
- postgresql≥ 9.5, < 9.5.23 | ≥ 9.6, < 9.6.19 | ≥ 10.0, < 10.14 | ≥ 11.0, < 11.9 | ≥ 12.0, < 12.4
6 vendors · 12 products
References
17 links- lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-08/msg00044.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-08/msg00049.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-08/msg00050.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2020/08/msg00028.htmlVendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory- lists.opensuse.org/opensuse-security-announce/2020-09/msg00003.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2020-09/msg00008.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
