CVE-2018-1058: Canonical Ubuntu Linux

High severity, CVSS 8.8. EPSS: 13.1% chance of exploitation in the next 30 days.

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 17.10 only
• PostgreSQL PostgreSQL: from 9.3, before 9.3.22 (fixed in 9.3.22); from 9.4, before 9.4.17 (fixed in 9.4.17); from 9.5, before 9.5.12 (fixed in 9.5.12); from 9.6, before 9.6.8 (fixed in 9.6.8); from 10.0, before 10.3 (fixed in 10.3)
• Red Hat Cloudforms: version 4.6 only

Published 2018-03-02. Last modified 2026-06-17.