Skip to content
Fencer Vulns
medium 6.7

CVE-2017-12172 json

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 run…

published 2017-11-22 8 y ago modified 2026-10-15 24 d ago also EUVD-2017-3748

cvss
6.7
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 48%
public exploits
0
none known

Summary

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.

Patch / fix

  • rh-postgresql96-postgresql RHEL 3 SOFTWARE_COLLECTIONS 9.6.5-2.el6
  • rh-postgresql96-postgresql RHEL 3 SOFTWARE_COLLECTIONS 9.6.5-2.el7
  • rh-postgresql96-postgresql-libs RHEL 3 SOFTWARE_COLLECTIONS 9.6.5-2.el6
  • rh-postgresql96-postgresql-libs RHEL 3 SOFTWARE_COLLECTIONS 9.6.5-2.el7
  • rh-postgresql96-postgresql-test RHEL 3 SOFTWARE_COLLECTIONS 9.6.5-2.el6
  • rh-postgresql96-postgresql-test RHEL 3 SOFTWARE_COLLECTIONS 9.6.5-2.el7
  • rh-postgresql96-postgresql-pltcl RHEL 3 SOFTWARE_COLLECTIONS 9.6.5-2.el6
  • rh-postgresql96-postgresql-pltcl RHEL 3 SOFTWARE_COLLECTIONS 9.6.5-2.el7

red hat advisories RHSA-2017:3405RHSA-2017:3404RHSA-2017:3403RHSA-2017:3402

  • postgresql94 SLES for SAP 12 SP2, SLES for Raspberry Pi 12 SP2, SLES 12 SP2 +1 more 9.4.15-21.13.1
  • postgresql94-libs SLE Software Development Kit 12 SP2 9.4.15-21.13.1
  • postgresql94 SLES for SAP 11 SP4, SLES 11 SP4 9.4.15-0.23.10.1
  • postgresql94-libs SLES for SAP 11 SP4, SLES 11 SP4, SLE Software Development Kit 11 SP4 9.4.15-0.23.10.1

suse advisories SUSE-SU-2018:0081-1SUSE-SU-2018:0077-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2017-12172 updated cvss 6.7

postgresql: Start scripts permit database administrator to modify root-owned files

  • Red Hat CloudForms Management Engine 5 postgresql94, postgresql94-libs, postgresql94-test, postgresql94-pltcl, postgresql94-plperl, postgresql94-server, +2 more
    affected: no fix available
  • Red Hat Enterprise Linux 5 postgresql, postgresql84 Red Hat Enterprise Linux 6 postgresql, postgresql-libs, postgresql-test, postgresql-pltcl, postgresql-plperl, postgresql-server, +2 more
    affected: no fix planned “Will not fix”
  • Red Hat Satellite 5 rh-postgresql95-postgresql
    affected: no fix available
  • Red Hat Enterprise Linux Client (v. 7) postgresql 9.2.23-3.el7_4, postgresql-libs 9.2.23-3.el7_4 Red Hat Enterprise Linux Client Optional (v. 7) postgresql 9.2.23-3.el7_4, postgresql-test 9.2.23-3.el7_4, postgresql-pltcl 9.2.23-3.el7_4, postgresql-plperl 9.2.23-3.el7_4, postgresql-server 9.2.23-3.el7_4, postgresql-contrib 9.2.23-3.el7_4, +2 more Red Hat Enterprise Linux ComputeNode (v. 7) postgresql 9.2.23-3.el7_4, postgresql-libs 9.2.23-3.el7_4 Red Hat Enterprise Linux ComputeNode Optional (v. 7) postgresql 9.2.23-3.el7_4, postgresql-test 9.2.23-3.el7_4, postgresql-pltcl 9.2.23-3.el7_4, postgresql-plperl 9.2.23-3.el7_4, postgresql-server 9.2.23-3.el7_4, postgresql-contrib 9.2.23-3.el7_4, +2 more Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) postgresql 9.2.23-3.el7_4, postgresql-libs 9.2.23-3.el7_4, postgresql-test 9.2.23-3.el7_4, postgresql-pltcl 9.2.23-3.el7_4, postgresql-plperl 9.2.23-3.el7_4, postgresql-server 9.2.23-3.el7_4, +2 more Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) postgresql-upgrade 9.2.23-3.el7_4
    +4 more products
    Red Hat Enterprise Linux Server (v. 7) postgresql 9.2.23-3.el7_4, postgresql-libs 9.2.23-3.el7_4, postgresql-test 9.2.23-3.el7_4, postgresql-pltcl 9.2.23-3.el7_4, postgresql-plperl 9.2.23-3.el7_4, postgresql-server 9.2.23-3.el7_4, +2 more Red Hat Enterprise Linux Server Optional (v. 7) postgresql-upgrade 9.2.23-3.el7_4 Red Hat Enterprise Linux Workstation (v. 7) postgresql 9.2.23-3.el7_4, postgresql-libs 9.2.23-3.el7_4, postgresql-test 9.2.23-3.el7_4, postgresql-pltcl 9.2.23-3.el7_4, postgresql-plperl 9.2.23-3.el7_4, postgresql-server 9.2.23-3.el7_4, +2 more Red Hat Enterprise Linux Workstation Optional (v. 7) postgresql-upgrade 9.2.23-3.el7_4
    fixed: vendor fix RHSA-2017:3402
  • Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-postgresql95-postgresql 9.5.9-4.el6, rh-postgresql96-postgresql 9.6.5-2.el6, rh-postgresql94-postgresql 9.4.14-2.el6, rh-postgresql95-postgresql-libs 9.5.9-4.el6, rh-postgresql95-postgresql-test 9.5.9-4.el6, rh-postgresql96-postgresql-libs 9.6.5-2.el6, +22 more Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-postgresql95-postgresql 9.5.9-4.el7, rh-postgresql96-postgresql 9.6.5-2.el7, rh-postgresql94-postgresql 9.4.14-2.el7, rh-postgresql95-postgresql-libs 9.5.9-4.el7, rh-postgresql95-postgresql-test 9.5.9-4.el7, rh-postgresql96-postgresql-libs 9.6.5-2.el7, +22 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-postgresql95-postgresql 9.5.9-4.el6, rh-postgresql96-postgresql 9.6.5-2.el6, rh-postgresql94-postgresql 9.4.14-2.el6, rh-postgresql95-postgresql-libs 9.5.9-4.el6, rh-postgresql95-postgresql-test 9.5.9-4.el6, rh-postgresql96-postgresql-libs 9.6.5-2.el6, +22 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-postgresql95-postgresql 9.5.9-4.el7, rh-postgresql96-postgresql 9.6.5-2.el7, rh-postgresql94-postgresql 9.4.14-2.el7, rh-postgresql95-postgresql-libs 9.5.9-4.el7, rh-postgresql95-postgresql-test 9.5.9-4.el7, rh-postgresql96-postgresql-libs 9.6.5-2.el7, +22 more Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-postgresql95-postgresql 9.5.9-4.el7, rh-postgresql96-postgresql 9.6.5-2.el7, rh-postgresql94-postgresql 9.4.14-2.el7, rh-postgresql95-postgresql-libs 9.5.9-4.el7, rh-postgresql95-postgresql-test 9.5.9-4.el7, rh-postgresql96-postgresql-libs 9.6.5-2.el7, +22 more Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-postgresql95-postgresql 9.5.9-4.el6, rh-postgresql96-postgresql 9.6.5-2.el6, rh-postgresql94-postgresql 9.4.14-2.el6, rh-postgresql95-postgresql-libs 9.5.9-4.el6, rh-postgresql95-postgresql-test 9.5.9-4.el6, rh-postgresql96-postgresql-libs 9.6.5-2.el6, +22 more
    +1 more products
    Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-postgresql95-postgresql 9.5.9-4.el7, rh-postgresql96-postgresql 9.6.5-2.el7, rh-postgresql94-postgresql 9.4.14-2.el7, rh-postgresql95-postgresql-libs 9.5.9-4.el7, rh-postgresql95-postgresql-test 9.5.9-4.el7, rh-postgresql96-postgresql-libs 9.6.5-2.el7, +22 more
    fixed: vendor fix RHSA-2017:3403
  • Red Hat RHV-M 4.2 rh-postgresql95-postgresql 9.5.9-4.el7 Red Hat RHV-M 4.3 rh-postgresql95-postgresql 9.5.9-4.el7, rh-postgresql95-postgresql-libs 9.5.9-4.el7, rh-postgresql95-postgresql-test 9.5.9-4.el7, rh-postgresql95-postgresql-pltcl 9.5.9-4.el7, rh-postgresql95-postgresql-plperl 9.5.9-4.el7, rh-postgresql95-postgresql-server 9.5.9-4.el7, +2 more
    fixed: vendor fix RHSA-2017:3404

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
24 d ago

Exploit prediction

0.59% chance of exploitation in the next 30 days, higher than 48% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

  • Red Hat, Inc. postgresql

Classification

Weakness
  • CWE-59 Improper Link Resolution Before File Access
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.