CVE-2017-14798
published 2018-03-01CVE-2017-14798: A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.
PriorityP337high7CVSS 3.0
AVLACHPRLUINSUCHIHAH
EXPLOIT
EPSS
0.98%
57.7th percentile
A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| postgresql | postgresql | < 9.4-0.5.3.1 | 9.4-0.5.3.1 |
| suse | postgresql-init | unspecified – 9.4-0.5.3.1 | — |
| suse | suse_linux_enterprise_server | — | — |
CVSS provenance
nvdv3.07.0HIGHCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.htmlhttps://bugzilla.suse.com/show_bug.cgi?id=1062722https://www.exploit-db.com/exploits/45184/https://www.suse.com/de-de/security/cve/CVE-2017-14798/http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.htmlhttps://bugzilla.suse.com/show_bug.cgi?id=1062722https://www.exploit-db.com/exploits/45184/https://www.suse.com/de-de/security/cve/CVE-2017-14798/
2018-03-01
Published