Back to Database
Status published
High
CVE-2019-10208
A flaw was discovered in postgresql versions 9.4.x before 9.4.24,...
Vulnerability Description
A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10208
Credits & Attribution
No credits recorded in the NVD database.
References
More from PostgreSQL
View All →CVE-2019-10211
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24...
High
7.8
CVE-2019-10210
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24...
Medium
6.7
CVE-2019-10209
Postgresql, versions 11.x before 11.5, is vulnerable to a memory...
Low
3.1
CVE-2019-10164
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4...
High
7.5
CVE-2017-7548
PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to...
High
7.5
Affected Vendor
PostgreSQL
View all reports →Affected Software
postgresql
Vulnerable Versions:
all 11.x before 11.5, all 10.x before 10.10, all 9.6.x before 9.6.15, all 9.5.x before 9.5.19, all 9.4.x before 9.4.24
Timeline
Official Publish:
October 29th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H