Signature Detail

DB: PostgreSQL Database Password Change Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the PostgreSQL Database. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.

Affected Products

• Postgresql postgresql 10.0
• Postgresql postgresql 10.1
• Postgresql postgresql 10.2
• Postgresql postgresql 10.3
• Postgresql postgresql 10.4
• Postgresql postgresql 10.5
• Postgresql postgresql 10.6
• Postgresql postgresql 10.7
• Postgresql postgresql 10.8
• Postgresql postgresql 11.0
• Postgresql postgresql 11.1
• Postgresql postgresql 11.2
• Postgresql postgresql 11.3
• Redhat enterprise_linux 8.0

References

• BugTraq: 108875
• CVE: CVE-2019-10164