CVE-2019-10209

All Frameworks › PostgreSQL › CWE-200 › CVE-2019-10209

CVE-2019-10209

State: PUBLISHED · Published: 2019-10-29 · Updated: 2024-08-04 · Assigner: redhat

Description

Postgresql, versions 11.x before 11.5, is vulnerable to a memory disclosure in cross-type comparison for hashed subplan.

CWE

CWE-125 — CWE-125
CWE-200 — CWE-200

Affected

PostgreSQL / postgresql — v=all 11.x before 11.5 [affected]

CVSS

3.0 score=3.1 severity=LOW CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10209 x_refsource_CONFIRM
https://www.postgresql.org/about/news/1960/ x_refsource_CONFIRM

Source

cvelistV5-main/cves/2019/10xxx/CVE-2019-10209.json