SB2016092902 - SUSE Linux update for postgresql94 



SB2016092902 - SUSE Linux update for postgresql94

Published: September 29, 2016

Security Bulletin ID SB2016092902
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Critical 50% Medium 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Arbitrary code execution (CVE-ID: CVE-2016-5423)

The vulnerability allows a remote attacker to execute arbitrary code,

The vulnerability exists in PostgreSQL. A remote authenticated attacker can cause the target server to crash, disclose portions of server memory, or potentially execute arbitrary code by submiting specially crafted SQL statements containing CASE/WHEN commands.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


2) Disclosure of user information (CVE-ID: CVE-2016-5424)

The vulnerability allows a remote attacker to gain elevated privileges on the target system.

The vulnerability exists in PostgreSQL. A remote authenticated attacker with CREATEDB or CREATEROLE roles can gain elevated privileges on the target system by creating a specially crafted object name containing newlines, carriage returns, double quotes, or backslashes.

Successful exploitation of this vulnerability may result in disclosure of user information.


Remediation

Install update from vendor's website.