Description

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.

Remediation

References

CVE-2017-7548

Related Vulnerabilities

WordPress Plugin WP-Stats-Dashboard SQL Injection (2.9.4)

WordPress Plugin Insert or Embed Articulate Content into WordPress Unspecified Vulnerability (4.299993)

WordPress Plugin PayPlus Payment Gateway SQL Injection (7.0.7)

WordPress Plugin Ceceppa Multilingua Unspecified Vulnerability (1.5.3)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1170)

Severity

High

Classification

CVE-2017-7548 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities