CVE catalog
CVE-2019-10129
ALPINE-
A vulnerability was found in postgresql versions 11.x prior to 11.3. Using a purpose-crafted insert to a partitioned table, an attacker can read arbitrary bytes of server memory. In the default configuration, any user can create a partitioned table suitable for this attack. (Exploit prerequisites are the same as for CVE-2018-1052).
- Severity
- Medium · CVSS 6.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.63% · Oct 27, 2026
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Alpine3.20 | postgresql15 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.19 | postgresql15 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.18 | postgresql14 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.18 | postgresql15 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.17 | postgresql14 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.17 | postgresql15 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.16 | postgresql14 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.15 | postgresql14 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.14 | postgresql | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.13 | postgresql | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.12 | postgresql | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.11 | postgresql | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
Showing 12 observations. All 17 observations, including unknown and conflicting reports, are available below.
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Alpine3.10 | postgresql | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.11 | postgresql | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.12 | postgresql | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.13 | postgresql | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.14 | postgresql | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.15 | postgresql14 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.16 | postgresql14 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.17 | postgresql14 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.17 | postgresql15 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.18 | postgresql14 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.18 | postgresql15 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.19 | postgresql15 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.20 | postgresql15 | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.6 | postgresql | 9.6.13-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.7 | postgresql | 10.8-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.8 | postgresql | 10.8-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
| Alpine3.9 | postgresql | 11.3-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2019-10129] |
Original provider fields
{
"package_releases": [],
"fixed_versions": [],
"distribution_packages": [
{
"name": "postgresql",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.10",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.11",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.12",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.13",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.14",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0"
},
{
"fixed": "9.6.13-r0"
}
]
}
],
"release": "3.6",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "9.6.13-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0"
},
{
"fixed": "10.8-r0"
}
]
}
],
"release": "3.7",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "10.8-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0"
},
{
"fixed": "10.8-r0"
}
]
}
],
"release": "3.8",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "10.8-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "11.0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.9",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql14",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.15",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql14",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.16",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql14",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.17",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql14",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.18",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql15",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.17",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql15",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.18",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql15",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.19",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
},
{
"name": "postgresql15",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "11.3-r0"
}
]
}
],
"release": "3.20",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2019-10129",
"fixed_version": "11.3-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2019-10129",
"provider_updated_at": "2026-09-21T06:17:52.446882248Z",
"applicability_unknown": true
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11185-1.json]
- [https://osv.dev/vulnerability/ALPINE-CVE-2019-10129]
- [https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-10129.json]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]