PostgreSQL CVE-2017-7548 Remote Denial Of Service Vulnerability

Bugtraq ID:	100276
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-7548
Remote:	Yes
Local:	No
Published:	Aug 10 2017 12:00AM
Updated:	Aug 10 2017 12:00AM
Credit:	Chapman Flack
Vulnerable:	Redhat Software Collections for RHEL 0 PostgreSQL PostgreSQL 9.5.7 PostgreSQL PostgreSQL 9.5.6 PostgreSQL PostgreSQL 9.5.4 PostgreSQL PostgreSQL 9.5.1 PostgreSQL PostgreSQL 9.5 PostgreSQL PostgreSQL 9.4.12 PostgreSQL PostgreSQL 9.4.11 PostgreSQL PostgreSQL 9.4.9 PostgreSQL PostgreSQL 9.4.6 PostgreSQL PostgreSQL 9.4.5 PostgreSQL PostgreSQL 9.4.4 PostgreSQL PostgreSQL 9.4.3 PostgreSQL PostgreSQL 9.4.2 PostgreSQL PostgreSQL 9.4.1 PostgreSQL PostgreSQL 9.6.3 PostgreSQL PostgreSQL 9.6.2 PostgreSQL PostgreSQL 9.6.1 PostgreSQL PostgreSQL 9.5.2 PostgreSQL PostgreSQL 9.4 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 ia-30 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	PostgreSQL PostgreSQL 9.6.4 PostgreSQL PostgreSQL 9.5.8 PostgreSQL PostgreSQL 9.4.13

PostgreSQL CVE-2017-7548 Remote Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PostgreSQL CVE-2017-7548 Remote Denial Of Service Vulnerability

References:

• 2017-08-10 Security Update Release (PostgreSQL)
  
• PostgreSQL Homepage (PostgreSQL)
  
• Bug 1477187 CVE-2017-7548 postgresql: lo_put() function ignores ACLs (Redhat)
  
• CVE-2017-7548 (Redhat)
  
• Require update permission for the large object written by lo_put(). (Redhat)