CVE catalog

CVE-2018-1058

ALPINE-CVE-2018-1058

Severity: High · CVSS 8.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Feb 28, 2018, 12:00:00 AM UTC
Updated: Jul 8, 2026, 4:30:20 AM UTC
Source: [NVD] · [CVE record]
EPSS: 13.10% · Oct 25, 2026

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Alpine	postgresql	3.10	`10.3-r0`	fixed
Alpine	postgresql	3.11	`10.3-r0`	fixed
Alpine	postgresql	3.12	`10.3-r0`	fixed
Alpine	postgresql	3.13	`10.3-r0`	fixed
Alpine	postgresql	3.14	`10.3-r0`	fixed
Alpine	postgresql	3.4	`9.5.12-r0`	fixed
Alpine	postgresql	3.5	`9.6.8-r0`	fixed
Alpine	postgresql	3.6	`9.6.8-r0`	fixed
Alpine	postgresql	3.7	`10.3-r0`	fixed
Alpine	postgresql	3.8	`10.3-r0`	fixed
Alpine	postgresql	3.9	`10.3-r0`	fixed
Alpine	postgresql14	3.15	`10.3-r0`	fixed
Alpine	postgresql14	3.16	`10.3-r0`	fixed
Alpine	postgresql14	3.17	`10.3-r0`	fixed
Alpine	postgresql14	3.18	`10.3-r0`	fixed
Alpine	postgresql15	3.17	`10.3-r0`	fixed
Alpine	postgresql15	3.18	`10.3-r0`	fixed
Alpine	postgresql15	3.19	`10.3-r0`	fixed
Alpine	postgresql15	3.20	`10.3-r0`	fixed
Opensuse	kubectl-cnpg	tumbleweed	`1.29.2-1.1`	fixed
Ubuntu	postgresql-9.3	14.04	`9.3.1-1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.2-1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.2-1ubuntu1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.2-1ubuntu2`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.3-1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.3-1bzr1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.3-1bzr2`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.4-1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.5-0ubuntu0.14.04.1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.6-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.7-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.8-0ubuntu0.4.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.9-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.10-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.11-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.12-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.13-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.14-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.15-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.16-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.17-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.18-0ubuntu0.14.04.1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.19-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.20-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.21-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.22-0ubuntu0.14.04`	fixed
Ubuntu	postgresql-9.5	16.04	`9.5.0-1`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.0-2`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.0-3`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.1-1`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.2-1`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.3-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.4-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.5-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.6-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.7-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.8-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.9-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.10-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.11-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.12-0ubuntu0.16.04`	fixed
Ubuntu	postgresql-10	18.04	`10.1-1`	vulnerable
Ubuntu	postgresql-10	18.04	`10.1-2`	vulnerable
Ubuntu	postgresql-10	18.04	`10.2-1`	vulnerable
Ubuntu	postgresql-10	18.04	`10.3-1`	fixed
Ubuntu	postgresql-9.3	14.04	`9.3.1-1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.2-1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.2-1ubuntu1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.2-1ubuntu2`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.3-1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.3-1bzr1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.3-1bzr2`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.4-1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.5-0ubuntu0.14.04.1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.6-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.7-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.8-0ubuntu0.4.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.9-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.10-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.11-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.12-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.13-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.14-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.15-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.16-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.17-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.18-0ubuntu0.14.04.1`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.19-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.20-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.21-0ubuntu0.14.04`	vulnerable
Ubuntu	postgresql-9.3	14.04	`9.3.22-0ubuntu0.14.04`	fixed
Ubuntu	postgresql-9.5	16.04	`9.5.0-1`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.0-2`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.0-3`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.1-1`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.2-1`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.3-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.4-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.5-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.6-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.7-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.8-0ubuntu0.16.04.1`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.9-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.10-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.11-0ubuntu0.16.04`	vulnerable
Ubuntu	postgresql-9.5	16.04	`9.5.12-0ubuntu0.16.04`	fixed
Suse	postgresql94-libs	linux enterprise software development kit 11 sp4	`9.4.17-0.23.16.1`	fixed
Suse	postgresql94	linux enterprise server 11 sp4	`9.4.17-0.23.16.1`	fixed
Suse	postgresql94-libs	linux enterprise server 11 sp4	`9.4.17-0.23.16.1`	fixed
Suse	postgresql94	linux enterprise server for sap applications 11 sp4	`9.4.17-0.23.16.1`	fixed
Suse	postgresql94-libs	linux enterprise server for sap applications 11 sp4	`9.4.17-0.23.16.1`	fixed
Suse	postgresql96	linux enterprise desktop 12 sp2	`9.6.8-3.16.1`	fixed
Suse	postgresql96-libs	linux enterprise desktop 12 sp2	`9.6.8-3.16.1`	fixed
Suse	postgresql96	linux enterprise desktop 12 sp3	`9.6.8-3.16.1`	fixed
Suse	postgresql96-libs	linux enterprise desktop 12 sp3	`9.6.8-3.16.1`	fixed
Suse	postgresql96	linux enterprise server for raspberry pi 12 sp2	`9.6.8-3.16.1`	fixed
Suse	postgresql96-libs	linux enterprise server for raspberry pi 12 sp2	`9.6.8-3.16.1`	fixed
Suse	postgresql96-libs	linux enterprise software development kit 12 sp2	`9.6.8-3.16.1`	fixed
Suse	postgresql96-libs	linux enterprise software development kit 12 sp3	`9.6.8-3.16.1`	fixed
Suse	postgresql96	linux enterprise server 12 sp2	`9.6.8-3.16.1`	fixed
Suse	postgresql96-libs	linux enterprise server 12 sp2	`9.6.8-3.16.1`	fixed
Suse	postgresql96	linux enterprise server for sap applications 12 sp2	`9.6.8-3.16.1`	fixed
Suse	postgresql96-libs	linux enterprise server for sap applications 12 sp2	`9.6.8-3.16.1`	fixed
Suse	postgresql96	linux enterprise server 12 sp3	`9.6.8-3.16.1`	fixed
Suse	postgresql96-libs	linux enterprise server 12 sp3	`9.6.8-3.16.1`	fixed
Suse	postgresql96	linux enterprise server for sap applications 12 sp3	`9.6.8-3.16.1`	fixed
Suse	postgresql96-libs	linux enterprise server for sap applications 12 sp3	`9.6.8-3.16.1`	fixed
Suse	postgresql94	linux enterprise desktop 12 sp2	`9.4.17-21.19.1`	fixed
Suse	postgresql94	linux enterprise server for raspberry pi 12 sp2	`9.4.17-21.19.1`	fixed
Suse	postgresql94-libs	linux enterprise software development kit 12 sp2	`9.4.17-21.19.1`	fixed
Suse	postgresql94	linux enterprise server 12 sp2	`9.4.17-21.19.1`	fixed
Suse	postgresql94	linux enterprise server for sap applications 12 sp2	`9.4.17-21.19.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Alpine	postgresql	apk	3.10	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql	apk	3.11	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql	apk	3.12	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql	apk	3.13	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql	apk	3.14	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql	apk	3.4	`9.5.12-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql	apk	3.5	`9.6.8-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql	apk	3.6	`9.6.8-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql	apk	3.7	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql	apk	3.8	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql	apk	3.9	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql14	apk	3.15	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql14	apk	3.16	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql14	apk	3.17	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql14	apk	3.18	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql15	apk	3.17	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql15	apk	3.18	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql15	apk	3.19	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Alpine	postgresql15	apk	3.20	`10.3-r0`	Not reported	ALPINE-CVE-2018-1058	Not reported
Opensuse	kubectl-cnpg	rpm	tumbleweed	`1.29.2-1.1`	Not reported	OPENSUSE-SU-2026:11167-1	Not reported
Ubuntu	postgresql-9.3	deb	14.04	`9.3.22-0ubuntu0.14.04`	Not reported	UBUNTU-CVE-2018-1058	Not reported
Ubuntu	postgresql-9.5	deb	16.04	`9.5.12-0ubuntu0.16.04`	Not reported	UBUNTU-CVE-2018-1058	Not reported
Ubuntu	postgresql-10	deb	18.04	`10.3-1`	Not reported	UBUNTU-CVE-2018-1058	Not reported
Ubuntu	postgresql-9.3	deb	14.04	`9.3.22-0ubuntu0.14.04`	Not reported	USN-3589-1	Not reported
Ubuntu	postgresql-9.5	deb	16.04	`9.5.12-0ubuntu0.16.04`	Not reported	USN-3589-1	Not reported
Suse	postgresql94-libs	rpm	linux enterprise software development kit 11 sp4	`9.4.17-0.23.16.1`	Not reported	SUSE-SU-2018:0755-1	Not reported
Suse	postgresql94	rpm	linux enterprise server 11 sp4	`9.4.17-0.23.16.1`	Not reported	SUSE-SU-2018:0755-1	Not reported
Suse	postgresql94-libs	rpm	linux enterprise server 11 sp4	`9.4.17-0.23.16.1`	Not reported	SUSE-SU-2018:0755-1	Not reported
Suse	postgresql94	rpm	linux enterprise server for sap applications 11 sp4	`9.4.17-0.23.16.1`	Not reported	SUSE-SU-2018:0755-1	Not reported
Suse	postgresql94-libs	rpm	linux enterprise server for sap applications 11 sp4	`9.4.17-0.23.16.1`	Not reported	SUSE-SU-2018:0755-1	Not reported
Suse	postgresql96	rpm	linux enterprise desktop 12 sp2	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96-libs	rpm	linux enterprise desktop 12 sp2	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96	rpm	linux enterprise desktop 12 sp3	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96-libs	rpm	linux enterprise desktop 12 sp3	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96	rpm	linux enterprise server for raspberry pi 12 sp2	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96-libs	rpm	linux enterprise server for raspberry pi 12 sp2	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96-libs	rpm	linux enterprise software development kit 12 sp2	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96-libs	rpm	linux enterprise software development kit 12 sp3	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96	rpm	linux enterprise server 12 sp2	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96-libs	rpm	linux enterprise server 12 sp2	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96	rpm	linux enterprise server for sap applications 12 sp2	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96-libs	rpm	linux enterprise server for sap applications 12 sp2	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96	rpm	linux enterprise server 12 sp3	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96-libs	rpm	linux enterprise server 12 sp3	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96	rpm	linux enterprise server for sap applications 12 sp3	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql96-libs	rpm	linux enterprise server for sap applications 12 sp3	`9.6.8-3.16.1`	Not reported	SUSE-SU-2018:0756-1	Not reported
Suse	postgresql94	rpm	linux enterprise desktop 12 sp2	`9.4.17-21.19.1`	Not reported	SUSE-SU-2018:0876-1	Not reported
Suse	postgresql94	rpm	linux enterprise server for raspberry pi 12 sp2	`9.4.17-21.19.1`	Not reported	SUSE-SU-2018:0876-1	Not reported
Suse	postgresql94-libs	rpm	linux enterprise software development kit 12 sp2	`9.4.17-21.19.1`	Not reported	SUSE-SU-2018:0876-1	Not reported
Suse	postgresql94	rpm	linux enterprise server 12 sp2	`9.4.17-21.19.1`	Not reported	SUSE-SU-2018:0876-1	Not reported
Suse	postgresql94	rpm	linux enterprise server for sap applications 12 sp2	`9.4.17-21.19.1`	Not reported	SUSE-SU-2018:0876-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[kubectl-cnpg-bash-completion]Unknown
Source package: [kubectl-cnpg]
Details (1)
- 1.29.2-1.3 · noarch · tumbleweed
  Unknown · Fixed: 1.29.2-1.1
  Version impact unknown
  pypi · kubectl-cnpg · opensuse · tumbleweed
[kubectl-cnpg-fish-completion]Unknown
Source package: [kubectl-cnpg]
Details (1)
- 1.29.2-1.3 · noarch · tumbleweed
  Unknown · Fixed: 1.29.2-1.1
  Version impact unknown
  pypi · kubectl-cnpg · opensuse · tumbleweed
[kubectl-cnpg-zsh-completion]Unknown
Source package: [kubectl-cnpg]
Details (1)
- 1.29.2-1.3 · noarch · tumbleweed
  Unknown · Fixed: 1.29.2-1.1
  Version impact unknown
  pypi · kubectl-cnpg · opensuse · tumbleweed
[kubectl-cnpg]Fixed
Source package: [kubectl-cnpg]
Details (1)
- 1.29.2-1.3 · x86_64 · tumbleweed
  Fixed · Fixed: 1.29.2-1.1
  pypi · kubectl-cnpg · opensuse · tumbleweed

Observed: Oct 23, 2026, 5:33:04 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]