high7.3Public exploit code
CVE-2017-14798
A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PostgreSQL 9.4-0.5.3 - Privilege Escalation2018-08-13 · local · linux
Impact
A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postgresql | Postgresql | before 9.4-0.5.3.1 |
| Suse | Suse Linux Enterprise Server | Version 11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html
- https://bugzilla.suse.com/show_bug.cgi?id=1062722
- https://www.exploit-db.com/exploits/45184/
- https://www.suse.com/de-de/security/cve/CVE-2017-14798/
- http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html
- https://bugzilla.suse.com/show_bug.cgi?id=1062722
- https://www.exploit-db.com/exploits/45184/
- https://www.suse.com/de-de/security/cve/CVE-2017-14798/