CVE-2017-14798

A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.

Score

CVSS 3.0 7.3 High

Status

Modified - security@opentext.com

Published

2018-03-01

Last modified

2024-09-16

Weaknesses

CWE-362, CWE-61

Affected products

• Postgresql (Postgresql)
• Postgresql-init (Suse)
• Suse Linux Enterprise Server (Suse)

References

• http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html
• https://bugzilla.suse.com/show_bug.cgi?id=1062722
• https://www.exploit-db.com/exploits/45184/
• https://www.suse.com/de-de/security/cve/CVE-2017-14798/