CVE-2017-14798 local privilege escalation in SUSE postgresql init script
HighCVSS 7.0
EPSS 1.00%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postgresql | < 9.4-0.5.3.1 | 9.4-0.5.3.1 |
| suse linux enterprise server | = 11-sp3 | No fix listed |
| SUSE postgresql-init | <= 9.4-0.5.3.1 | No fix listed |
References
- SUSE-SU-2017:3107 vendor-advisory
- bugzilla.suse.com
- 45184 exploit
- www.suse.com