CVE-2019-10164.json

{
    "CVE-ID": "CVE-2019-10164",
    "NVD": {
        "Descriptions": "PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.",
        "Cvss2_BaseScore": 9,
        "Cvss3_BaseScore": 7.5,
        "Cvss2_VectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
        "Cvss3_VectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "CPEs": [
            {
                "URI": "cpe:/o:redhat:enterprise_linux:8.0",
                "FormattedString": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:opensuse:leap:15.1",
                "FormattedString": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:opensuse:leap:15.0",
                "FormattedString": "cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:fedoraproject:fedora:30",
                "FormattedString": "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/o:fedoraproject:fedora:29",
                "FormattedString": "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "10.0",
                "VersionEndExcluding": "10.9",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "11.0",
                "VersionEndExcluding": "11.4",
                "VersionEndIncluding": ""
            }
        ]
    },
    "Official": {
        "10.9": {
            "source": [
                "https://www.postgresql.org/support/security/10/",
                "https://www.postgresql.org/docs/release/10.9/"
            ]
        },
        "11.4": {
            "source": [
                "https://www.postgresql.org/support/security/11/",
                "https://www.postgresql.org/docs/release/11.4/"
            ]
        }
    }
}