UpHeron
All vulnerabilities

Servers and applications

CVE-2018-1058

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Severity
High 8.8
Published
2 Mar 2018
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Fixed in
9.3.22, 9.4.17, 9.5.12, 9.6.8, 10.3
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • From 9.3 before 9.3.22
  • From 9.4 before 9.4.17
  • From 9.5 before 9.5.12
  • From 9.6 before 9.6.8
  • From 10.0 before 10.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-1058
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-1058