admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-06-12 02:05:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

CVE-2019-10164

Browse Source
This commit is contained in:
mrehak@redhat.com 2019-06-25 14:29:32 +02:00
parent a99e213ebb
commit c9d44f2dac
No known key found for this signature in database
GPG Key ID: 61C2AB3CDC29106F
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
2019/10xxx/CVE-2019-10164.json
View File

@ -47,7 +47,7 @@
"references": {
"reference_data": [
{
"url": "https://www.postgresql.org/support/security/"
"url": "https://www.postgresql.org/about/news/1949/"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10164",
@ -60,7 +60,7 @@
"description_data": [
{
"lang": "eng",
"value": "PostgreSQL before versions 10.9, 11.4 is vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account."
"value": "PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account."
}
]
},