CVE-2019-10164: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days.

PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow. Any authenticated user can overflow a stack-based buffer by changing the user's own password to a purpose-crafted value. This often suffices to execute arbitrary code as the PostgreSQL operating system account.

Affected products

• Fedoraproject Fedora: version 29 only; version 30 only
• Opensuse Leap: version 15.0 only; version 15.1 only
• PostgreSQL PostgreSQL: from 10.0, before 10.9 (fixed in 10.9); from 11.0, before 11.4 (fixed in 11.4)
• Red Hat Enterprise Linux: version 8.0 only

Published 2019-06-26. Last modified 2026-06-17.