CVE-2017-14798 - OpenCVE

A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.

No CVSS v4.0

No CVSS v3.1

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:L/AC:M/Au:N/C:C/I:C/A:C

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Postgresql	Postgresql
Suse	Suse Linux Enterprise Server

Configuration 1 [-]

cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*

No data.

References

Link	Providers
http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html
https://bugzilla.suse.com/show_bug.cgi?id=1062722
https://www.exploit-db.com/exploits/45184/
https://www.suse.com/de-de/security/cve/CVE-2017-14798/

History

Mon, 16 Sep 2024 19:30:00 +0000

Type	Values Removed	Values Added
Title	local privilege escalation in SUSE postgresql init script	local privilege escalation in SUSE postgresql init script

MITRE

Status: PUBLISHED

Assigner: microfocus

Published: 2018-03-01T19:00:00Z

Updated: 2024-09-16T19:20:37.635Z

Reserved: 2017-09-27T00:00:00

Link: CVE-2017-14798

Vulnrichment

No data.

NVD

Status : Modified

Published: 2018-03-01T20:29:00.210

Modified: 2023-11-07T02:39:11.377

Link: CVE-2017-14798

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "postgresql-init", "vendor": "suse", "versions": [{"lessThanOrEqual": "9.4-0.5.3.1", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Johannes Segitz of SUSE"}], "datePublic": "2017-11-27T00:00:00", "descriptions": [{"lang": "en", "value": "A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "creation of directory could follow symlinks", "lang": "en", "type": "text"}]}, {"descriptions": [{"cweId": "CWE-61", "description": "CWE-61", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-01-06T16:15:53", "orgId": "f81092c5-7f14-476d-80dc-24857f90be84", "shortName": "microfocus"}, "references": [{"name": "45184", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/45184/"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://bugzilla.suse.com/show_bug.cgi?id=1062722"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.suse.com/de-de/security/cve/CVE-2017-14798/"}, {"name": "SUSE-SU-2017:3107", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html"}], "solutions": [{"lang": "en", "value": "Update to the update packages."}], "source": {"advisory": "http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html", "defect": ["https://bugzilla.suse.com/show_bug.cgi?id=1062722"], "discovery": "INTERNAL"}, "title": "local privilege escalation in SUSE postgresql init script", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@microfocus.com", "DATE_PUBLIC": "2017-11-27T00:00:00.000Z", "ID": "CVE-2017-14798", "STATE": "PUBLIC", "TITLE": "local privilege escalation in SUSE postgresql init script"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "postgresql-init", "version": {"version_data": [{"affected": "<=", "version_affected": "<=", "version_value": "9.4-0.5.3.1"}]}}]}, "vendor_name": "suse"}]}}, "credit": [{"lang": "eng", "value": "Johannes Segitz of SUSE"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "creation of directory could follow symlinks"}]}, {"description": [{"lang": "eng", "value": "CWE-61"}]}]}, "references": {"reference_data": [{"name": "45184", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/45184/"}, {"name": "https://bugzilla.suse.com/show_bug.cgi?id=1062722", "refsource": "CONFIRM", "url": "https://bugzilla.suse.com/show_bug.cgi?id=1062722"}, {"name": "https://www.suse.com/de-de/security/cve/CVE-2017-14798/", "refsource": "CONFIRM", "url": "https://www.suse.com/de-de/security/cve/CVE-2017-14798/"}, {"name": "SUSE-SU-2017:3107", "refsource": "SUSE", "url": "http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html"}]}, "solution": [{"lang": "en", "value": "Update to the update packages."}], "source": {"advisory": "http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html", "defect": ["https://bugzilla.suse.com/show_bug.cgi?id=1062722"], "discovery": "INTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T19:34:39.965Z"}, "title": "CVE Program Container", "references": [{"name": "45184", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/45184/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://bugzilla.suse.com/show_bug.cgi?id=1062722"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.suse.com/de-de/security/cve/CVE-2017-14798/"}, {"name": "SUSE-SU-2017:3107", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html"}]}]}, "cveMetadata": {"assignerOrgId": "f81092c5-7f14-476d-80dc-24857f90be84", "assignerShortName": "microfocus", "cveId": "CVE-2017-14798", "datePublished": "2018-03-01T19:00:00Z", "dateReserved": "2017-09-27T00:00:00", "dateUpdated": "2024-09-16T19:20:37.635Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*", "matchCriteriaId": "BBA74A80-297A-441C-B12D-799AAB5BB669", "versionEndExcluding": "9.4-0.5.3.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*", "matchCriteriaId": "DD4BBD63-E038-45CE-9537-D96831E99A06", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root."}, {"lang": "es", "value": "Una condici\u00f3n de carrera en el script init de postgresql podr\u00eda ser aprovechada por atacantes para acceder a la cuenta postgresql y escalar sus privilegios a root."}], "id": "CVE-2017-14798", "lastModified": "2023-11-07T02:39:11.377", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.9, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.0, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.3, "impactScore": 5.9, "source": "security@opentext.com", "type": "Secondary"}]}, "published": "2018-03-01T20:29:00.210", "references": [{"source": "security@opentext.com", "url": "http://lists.suse.com/pipermail/sle-security-updates/2017-November/003420.html"}, {"source": "security@opentext.com", "url": "https://bugzilla.suse.com/show_bug.cgi?id=1062722"}, {"source": "security@opentext.com", "url": "https://www.exploit-db.com/exploits/45184/"}, {"source": "security@opentext.com", "url": "https://www.suse.com/de-de/security/cve/CVE-2017-14798/"}], "sourceIdentifier": "security@opentext.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-362"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-61"}], "source": "security@opentext.com", "type": "Secondary"}]}