CVE-2017-14798 local privilege escalation in SUSE postgresql init script
A race condition in the SUSE PostgreSQL init script allows local attackers with postgresql account access to escalate privileges to root.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2017-14798?
CVE-2017-14798 is a high-severity vulnerability in Postgresql Postgresql, published on 1 Mar 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.
Which versions are affected by CVE-2017-14798?
It affects 2 products.
Linux distribution packages (2)
postgresql-init SUSE:Linux Enterprise Server 11 SP4 | All versions | 9.4-0.5.3.1 |
postgresql-init SUSE:Linux Enterprise Server for SAP Applications 11 SP4 | All versions | 9.4-0.5.3.1 |
Products include Postgresql Postgresql, Suse Suse Linux Enterprise Server.
How do I fix CVE-2017-14798?
Apply the vendor's patch.
Is CVE-2017-14798 being exploited?
There is no known exploitation of CVE-2017-14798 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Postgresql Postgresql
Sources
Also known as GHSA-934j-74pq-c42g, SUSE-SU-2017:3107-1, openSUSE-SU-2024:11183-1.