30th September 2021: PostgreSQL 14 Released!

CVE-2019-10129

Memory disclosure in partition routing

Prior to this release, a user running PostgreSQL 11 can read arbitrary bytes of server memory by executing a purpose-crafted INSERT statement to a partitioned table.

Version Information

Affected Version Fixed In Fix Published
11 11.3 2019-05-09

For more information about PostgreSQL versioning, please visit the versioning page.

CVSS 3.0

Overall Score 6.5
Component core server
Vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Reporting Security Vulnerabilities

If you wish to report a new security vulnerability in PostgreSQL, please send an email to security@postgresql.org.

For reporting non-security bugs, please see the Report a Bug page.