Unscored USN-3589-1 1 CVE

postgresql-9.3, postgresql-9.5, postgresql-9.6 vulnerability

Published Mar 6, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that PostgreSQL incorrectly handled certain settings.
An attacker could possibly use this issue to execute arbitrary code.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	postgresql-9.3	9.3.22-0ubuntu0.14.04
Ubuntu · 16.04 LTS 16.04:LTS	postgresql-9.5	9.5.12-0ubuntu0.16.04

Vulnerabilities 1

Unscored —

CVE-2018-1058 Public exploit EPSS 13%

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker wi…

The PostgreSQL Global Development Group PostgreSQL postgresql-9.3 postgresql15 Ubuntu Alpine

Mar 2, 2018

References

report
https://ubuntu.com/security/CVE-2018-1058
report
https://launchpad.net/bugs/1752271