UBUNTU-CVE-2018-1053

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2018-1053

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-1053.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-1053

Related

Published

2018-02-07T00:00:00Z

Modified

2018-02-07T00:00:00Z

Severity

7.0 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pgupgrade creates file in current working directory containing the output of pg_dumpall -g under umask which was in effect when the user invoked pgupgrade, and not under 0077 which is normally used for other temporary files. This can allow an authenticated attacker to read or modify the one file, which may contain encrypted or unencrypted database passwords. The attack is infeasible if a directory mode blocks the attacker searching the current working directory or if the prevailing umask blocks the attacker opening the file.

References

Affected packages

Ubuntu:16.04:LTS / postgresql-9.5

Package

Name: postgresql-9.5
Purl: pkg:deb/ubuntu/postgresql-9.5@9.5.11-0ubuntu0.16.04?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.5.11-0ubuntu0.16.04

Affected versions

9.*

9.5.0-1

9.5.0-2

9.5.0-3

9.5.1-1

9.5.2-1

9.5.3-0ubuntu0.16.04

9.5.4-0ubuntu0.16.04

9.5.5-0ubuntu0.16.04

9.5.6-0ubuntu0.16.04

9.5.7-0ubuntu0.16.04

9.5.8-0ubuntu0.16.04.1

9.5.9-0ubuntu0.16.04

9.5.10-0ubuntu0.16.04

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "libecpg6-dbgsym": "9.5.11-0ubuntu0.16.04",
            "libecpg6": "9.5.11-0ubuntu0.16.04",
            "postgresql-9.5-dbgsym": "9.5.11-0ubuntu0.16.04",
            "postgresql-doc-9.5": "9.5.11-0ubuntu0.16.04",
            "libpq5": "9.5.11-0ubuntu0.16.04",
            "libpq5-dbgsym": "9.5.11-0ubuntu0.16.04",
            "postgresql-plpython3-9.5": "9.5.11-0ubuntu0.16.04",
            "libpq-dev": "9.5.11-0ubuntu0.16.04",
            "libecpg-dev-dbgsym": "9.5.11-0ubuntu0.16.04",
            "postgresql-plpython3-9.5-dbgsym": "9.5.11-0ubuntu0.16.04",
            "libpgtypes3-dbgsym": "9.5.11-0ubuntu0.16.04",
            "libecpg-compat3": "9.5.11-0ubuntu0.16.04",
            "postgresql-client-9.5": "9.5.11-0ubuntu0.16.04",
            "postgresql-contrib-9.5": "9.5.11-0ubuntu0.16.04",
            "postgresql-9.5-dbg": "9.5.11-0ubuntu0.16.04",
            "postgresql-server-dev-9.5": "9.5.11-0ubuntu0.16.04",
            "postgresql-server-dev-9.5-dbgsym": "9.5.11-0ubuntu0.16.04",
            "libecpg-dev": "9.5.11-0ubuntu0.16.04",
            "postgresql-contrib-9.5-dbgsym": "9.5.11-0ubuntu0.16.04",
            "postgresql-9.5": "9.5.11-0ubuntu0.16.04",
            "postgresql-plpython-9.5-dbgsym": "9.5.11-0ubuntu0.16.04",
            "postgresql-client-9.5-dbgsym": "9.5.11-0ubuntu0.16.04",
            "libpgtypes3": "9.5.11-0ubuntu0.16.04",
            "postgresql-plperl-9.5": "9.5.11-0ubuntu0.16.04",
            "postgresql-pltcl-9.5": "9.5.11-0ubuntu0.16.04",
            "postgresql-plperl-9.5-dbgsym": "9.5.11-0ubuntu0.16.04",
            "postgresql-plpython-9.5": "9.5.11-0ubuntu0.16.04",
            "postgresql-pltcl-9.5-dbgsym": "9.5.11-0ubuntu0.16.04",
            "libecpg-compat3-dbgsym": "9.5.11-0ubuntu0.16.04",
            "libpq-dev-dbgsym": "9.5.11-0ubuntu0.16.04"
        }
    ]
}

Ubuntu:18.04:LTS / postgresql-10

Package

Name: postgresql-10
Purl: pkg:deb/ubuntu/postgresql-10@10.2-1?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.2-1

Affected versions

10.*

10.1-1

10.1-2

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "libpgtypes3-dbgsym": "10.2-1",
            "libecpg6": "10.2-1",
            "postgresql-client-10-dbgsym": "10.2-1",
            "postgresql-plpython3-10-dbgsym": "10.2-1",
            "postgresql-plperl-10-dbgsym": "10.2-1",
            "postgresql-server-dev-10-dbgsym": "10.2-1",
            "postgresql-pltcl-10-dbgsym": "10.2-1",
            "libecpg-dev": "10.2-1",
            "postgresql-plperl-10": "10.2-1",
            "libpq5": "10.2-1",
            "libpq5-dbgsym": "10.2-1",
            "postgresql-client-10": "10.2-1",
            "libpgtypes3": "10.2-1",
            "libpq-dev": "10.2-1",
            "libecpg-dev-dbgsym": "10.2-1",
            "postgresql-doc-10": "10.2-1",
            "postgresql-plpython-10": "10.2-1",
            "postgresql-10": "10.2-1",
            "postgresql-10-dbgsym": "10.2-1",
            "postgresql-plpython-10-dbgsym": "10.2-1",
            "libecpg-compat3": "10.2-1",
            "postgresql-server-dev-10": "10.2-1",
            "postgresql-pltcl-10": "10.2-1",
            "postgresql-plpython3-10": "10.2-1",
            "libecpg-compat3-dbgsym": "10.2-1",
            "libecpg6-dbgsym": "10.2-1"
        }
    ]
}