CVE-2018-1115 Missing authorization in postgresql
An attacker with database access can bypass ACLs in the adminpack extension to force log rotation, potentially causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-1115?
CVE-2018-1115 is a medium-severity missing authorization vulnerability in Opensuse Leap, published on 10 May 2018. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.
Weakness: CWE-732
Which versions are affected by CVE-2018-1115?
It affects 2 products.
Linux distribution packages (7)
postgresql96 SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 9.6.9-3.19.1 |
postgresql96-libs SUSE:Linux Enterprise Desktop 12 SP3 | All versions | 9.6.9-3.19.1 |
postgresql96 SUSE:Linux Enterprise Server 12 SP3 | All versions | 9.6.9-3.19.1 |
postgresql96-libs SUSE:Linux Enterprise Server 12 SP3 | All versions | 9.6.9-3.19.1 |
postgresql96 SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 9.6.9-3.19.1 |
postgresql96-libs SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 9.6.9-3.19.1 |
postgresql96-libs SUSE:Linux Enterprise Software Development Kit 12 SP3 | All versions | 9.6.9-3.19.1 |
Products include Opensuse Leap, Postgresql Postgresql.
How do I fix CVE-2018-1115?
Upgrade to a fixed version.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2018-1115 being exploited?
There is no known exploitation of CVE-2018-1115 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Leap
Sources
Also known as ALPINE-CVE-2018-1115, CLEANSTART-2026-SF26103, GHSA-54w7-jv4g-qhqg, SUSE-SU-2018:1695-1, UBUNTU-CVE-2018-1115.