CVE-2019-10164

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
PostgreSQL	PostgreSQL	10.9; 11.4

References

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00035.htmlMailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10164Issue Tracking, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAGE6H4FWLKFLHLWVYNPYGQRPIXTUWGB/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TTKEHXGDXYYD6WYDIIQJP4GDQJSENDJK/
https://security.gentoo.org/glsa/202003-03Third Party Advisory
https://www.postgresql.org/about/news/1949/Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00035.htmlMailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10164Issue Tracking, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAGE6H4FWLKFLHLWVYNPYGQRPIXTUWGB/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TTKEHXGDXYYD6WYDIIQJP4GDQJSENDJK/
https://security.gentoo.org/glsa/202003-03Third Party Advisory
https://www.postgresql.org/about/news/1949/Vendor Advisory

Timeline

Published: Jun 26, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-101652.3OpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit logs for the Kubernetes API server and OpenS CVE-2019-101667.8It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would permit readonly clients to use the virDomainMana CVE-2019-101677.8The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accepts an "emulatorbin" argument to CVE-2019-101687.8The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x before 4.10.1 and 5.x.x before 5.4.1, accept CVE-2019-101697.2A flaw was found in Keycloak’s user-managed access interface, where it would permit a script to be set in the UMA policy. This flaw allows a CVE-2019-10177.0An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker CVE-2019-101707.2A flaw was found in the Keycloak admin console, where the realm management interface permits a script to be set via the policy. This flaw al CVE-2019-101717.5It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attac CVE-2019-101727.5A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also CVE-2019-101739.8It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security fram CVE-2019-101748.8A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application cl CVE-2019-101756.5A flaw was found in the containerized-data-importer in virt-cdi-cloner, version 1.4, where the host-assisted cloning feature does not determ