CVE-2017-12172PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database su…
Updated under an hour ago ()
Does this affect you?
It affects Red Hat, Inc. postgresql and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.
- CVSS
- 6.7 MEDIUM (v3.0, NVD)CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-59
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- redhat
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Red Hat, Inc. postgresql red_hat:postgresql (from the name) | 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, 9.2.x before 9.2.24 | CNA record |
postgresql postgresql postgresql:postgresql | 9.2; 9.2.1; 9.2.2; 9.2.3; 9.2.4; 9.2.5; 9.2.6; 9.2.7; and 68 more ranges | NVD |
References
- https://access.redhat.com/errata/RHSA-2017:3402vendor-advisory, x-refsource-redhat, issue-tracking, third-party-advisory
- http://www.securityfocus.com/bid/101949vdb-entry, x-refsource-bid, third-party-advisory
- https://access.redhat.com/errata/RHSA-2017:3403vendor-advisory, x-refsource-redhat, issue-tracking, third-party-advisory
- https://access.redhat.com/errata/RHSA-2017:3405vendor-advisory, x-refsource-redhat, issue-tracking, third-party-advisory
- https://www.postgresql.org/support/security/x-refsource-misc, issue-tracking, vendor-advisory
- http://www.securitytracker.com/id/1039752vdb-entry, x-refsource-sectrack, third-party-advisory
- https://www.postgresql.org/about/news/1801/x-refsource-confirm, issue-tracking, vendor-advisory
- https://access.redhat.com/errata/RHSA-2017:3404vendor-advisory, x-refsource-redhat, issue-tracking, third-party-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.