Description

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.

Remediation

References

CVE-2017-7548

Related Vulnerabilities

WordPress Plugin Sina Extension for Elementor Local File Inclusion (2.2.0)

silverstripeCMS Credentials Management Errors Vulnerability (CVE-2010-5092)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5004)

WordPress Plugin Opal Estate Cross-Site Request Forgery (1.6.11)

WordPress Plugin WP Statistics Multiple Cross-Site Scripting Vulnerabilities (12.0.1)

Severity

High

Classification

CVE-2017-7548 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities