diff options
| author | Alvaro Herrera <alvherre@alvh.no-ip.org> | 2020-02-10 11:47:09 -0300 |
|---|---|---|
| committer | Alvaro Herrera <alvherre@alvh.no-ip.org> | 2020-02-10 11:47:09 -0300 |
| commit | 2ad125322d5be8b264f2b0945d7dd23ba3ace60e (patch) | |
| tree | c5df44057ad948968abab7c058e05484d5c13775 /src/bin/scripts/createuser.c | |
| parent | 326431670a876925d699e2be7a216a23ee2d32bf (diff) | |
| download | postgresql-2ad125322d5be8b264f2b0945d7dd23ba3ace60e.tar.gz postgresql-2ad125322d5be8b264f2b0945d7dd23ba3ace60e.zip | |
Fix priv checks for ALTER <object> DEPENDS ON EXTENSION
Marking an object as dependant on an extension did not have any
privilege check whatsoever; this allowed any user to mark objects as
droppable by anyone able to DROP EXTENSION, which could be used to cause
system-wide havoc. Disallow by checking that the calling user owns the
mentioned object.
(No constraints are placed on the extension.)
Security: CVE-2020-1720
Reported-by: Tom Lane
Discussion: 31605.1566429043@sss.pgh.pa.us
Diffstat (limited to 'src/bin/scripts/createuser.c')
0 files changed, 0 insertions, 0 deletions