CVE-2017-12172 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-12172 Interim 1 28 2023-12-08T01:25:38Z current 2021-05-30T13:59:37Z 2023-12-08T01:25:38Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-12172 PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-January/003595.html E-Mail link for SUSE-SU-2018:0077-1 https://lists.suse.com/pipermail/sle-security-updates/2018-January/003597.html E-Mail link for SUSE-SU-2018:0081-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 7 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Point of Service 11 SP3 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 libecpg6-9.4.15-0.23.10.1 libpq5-32bit-9.4.15-0.23.10.1 libpq5-9.4.15-0.23.10.1 postgresql-9.2.23-3.el7_4 postgresql-contrib-9.2.23-3.el7_4 postgresql-devel-9.2.23-3.el7_4 postgresql-docs-9.2.23-3.el7_4 postgresql-init postgresql-libs-9.2.23-3.el7_4 postgresql-plperl-9.2.23-3.el7_4 postgresql-plpython-9.2.23-3.el7_4 postgresql-pltcl-9.2.23-3.el7_4 postgresql-server-9.2.23-3.el7_4 postgresql-static-9.2.23-3.el7_4 postgresql-test-9.2.23-3.el7_4 postgresql-upgrade-9.2.23-3.el7_4 postgresql10 postgresql94 postgresql94-9.4.15-0.23.10.1 postgresql94-9.4.15-21.13.1 postgresql94-contrib-9.4.15-0.23.10.1 postgresql94-contrib-9.4.15-21.13.1 postgresql94-devel-9.4.15-0.23.10.1 postgresql94-devel-9.4.15-21.13.1 postgresql94-docs-9.4.15-0.23.10.1 postgresql94-docs-9.4.15-21.13.1 postgresql94-server-9.4.15-0.23.10.1 postgresql94-server-9.4.15-21.13.1 postgresql-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-contrib-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-devel-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-docs-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-libs-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-plperl-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-plpython-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-pltcl-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-server-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-static-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-test-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql-upgrade-9.2.23-3.el7_4 as a component of SUSE Liberty Linux 7 postgresql94-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 libecpg6-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libpq5-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libpq5-32bit-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql94-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql94-contrib-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql94-docs-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA postgresql94-server-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA libecpg6-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libpq5-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libpq5-32bit-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql94-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql94-contrib-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql94-docs-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA postgresql94-server-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA libecpg6-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpq5-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP4 libpq5-32bit-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-contrib-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-docs-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-server-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server 11 SP4 postgresql94-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql94-contrib-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql94-docs-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql94-server-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server 12 SP2 postgresql94-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql94-contrib-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql94-docs-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 postgresql94-server-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libecpg6-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libpq5-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 libpq5-32bit-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 postgresql94-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 postgresql94-contrib-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 postgresql94-docs-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 postgresql94-server-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 postgresql94-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 postgresql94-contrib-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 postgresql94-docs-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 postgresql94-server-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 postgresql94-devel-9.4.15-0.23.10.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 postgresql94-devel-9.4.15-21.13.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 postgresql94 as a component of SUSE Linux Enterprise Point of Service 11 SP3 postgresql-init as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata postgresql10 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata postgresql94 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata postgresql-init as a component of SUSE Linux Enterprise Server 11 SP3 LTSS postgresql-init as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata postgresql10 as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata postgresql94 as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata postgresql94 as a component of SUSE Linux Enterprise Server 11 SP4 LTSS postgresql-init as a component of SUSE Linux Enterprise Server 11 SP4-LTSS postgresql-init as a component of SUSE Linux Enterprise Server 12 SP1-LTSS postgresql-init as a component of SUSE Linux Enterprise Server 12 SP2 postgresql-init as a component of SUSE Linux Enterprise Server 12 SP3 postgresql-init as a component of SUSE Linux Enterprise Server 12-LTSS PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server. CVE-2017-12172 SUSE Liberty Linux 7:postgresql-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-contrib-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-devel-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-docs-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-libs-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-plperl-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-plpython-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-pltcl-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-server-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-static-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-test-9.2.23-3.el7_4 SUSE Liberty Linux 7:postgresql-upgrade-9.2.23-3.el7_4 SUSE Linux Enterprise Desktop 12 SP2:postgresql94-9.4.15-21.13.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libecpg6-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libpq5-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:libpq5-32bit-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql94-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql94-contrib-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql94-docs-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:postgresql94-server-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libecpg6-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpq5-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:libpq5-32bit-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql94-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql94-contrib-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql94-docs-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:postgresql94-server-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP4:libecpg6-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP4:libpq5-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP4:libpq5-32bit-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP4:postgresql94-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP4:postgresql94-contrib-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP4:postgresql94-docs-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 11 SP4:postgresql94-server-9.4.15-0.23.10.1 SUSE Linux Enterprise Server 12 SP2:postgresql94-9.4.15-21.13.1 SUSE Linux Enterprise Server 12 SP2:postgresql94-contrib-9.4.15-21.13.1 SUSE Linux Enterprise Server 12 SP2:postgresql94-docs-9.4.15-21.13.1 SUSE Linux Enterprise Server 12 SP2:postgresql94-server-9.4.15-21.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql94-9.4.15-21.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql94-contrib-9.4.15-21.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql94-docs-9.4.15-21.13.1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:postgresql94-server-9.4.15-21.13.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libecpg6-9.4.15-0.23.10.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpq5-9.4.15-0.23.10.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:libpq5-32bit-9.4.15-0.23.10.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:postgresql94-9.4.15-0.23.10.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:postgresql94-contrib-9.4.15-0.23.10.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:postgresql94-docs-9.4.15-0.23.10.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:postgresql94-server-9.4.15-0.23.10.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql94-9.4.15-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql94-contrib-9.4.15-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql94-docs-9.4.15-21.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:postgresql94-server-9.4.15-21.13.1 SUSE Linux Enterprise Software Development Kit 11 SP4:postgresql94-devel-9.4.15-0.23.10.1 SUSE Linux Enterprise Software Development Kit 12 SP2:postgresql94-devel-9.4.15-21.13.1 SUSE Linux Enterprise Point of Service 11 SP3:postgresql94 SUSE Linux Enterprise Server 11 SP1 for Teradata:postgresql-init SUSE Linux Enterprise Server 11 SP1 for Teradata:postgresql10 SUSE Linux Enterprise Server 11 SP1 for Teradata:postgresql94 SUSE Linux Enterprise Server 11 SP3 LTSS:postgresql-init SUSE Linux Enterprise Server 11 SP3 for Teradata:postgresql-init SUSE Linux Enterprise Server 11 SP3 for Teradata:postgresql10 SUSE Linux Enterprise Server 11 SP3 for Teradata:postgresql94 SUSE Linux Enterprise Server 11 SP4 LTSS:postgresql94 SUSE Linux Enterprise Server 11 SP4-LTSS:postgresql-init SUSE Linux Enterprise Server 12 SP1-LTSS:postgresql-init SUSE Linux Enterprise Server 12 SP2:postgresql-init SUSE Linux Enterprise Server 12 SP3:postgresql-init SUSE Linux Enterprise Server 12-LTSS:postgresql-init important 6 AV:L/AC:H/Au:S/C:C/I:C/A:C 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H