30th September 2021: PostgreSQL 14 Released!

CVE-2018-1115

Too-permissive access control list on function pg_logfile_rotate()

Version Information

Affected Version Fixed In Fix Published
10 10.4 2018-05-10
9.6 9.6.9 2018-05-10

For more information about PostgreSQL versioning, please visit the versioning page.

CVSS 3.0

Overall Score 3.1
Component contrib module
Vector AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Reporting Security Vulnerabilities

If you wish to report a new security vulnerability in PostgreSQL, please send an email to security@postgresql.org.

For reporting non-security bugs, please see the Report a Bug page.