CVE:CVE-2018-10915
CNNVD:CNNVD-201808-266
PostgreSQL是Postgresql组织的一套自由的对象关系型数据库管理系统。该系统支持大部分SQL标准并且提供了许多其他特性，例如外键、触发器、视图等。
PostgreSQL中存在SQL注入漏洞。该漏洞源于基于数据库的应用缺少对外部输入SQL语句的验证。攻击者可利用该漏洞执行非法SQL命令。以下产品及版本受到影响：Postgresql 10.5之前版本，9.6.10之前版本，9.5.14之前版本，9.4.19之前版本，9.3.24之前版本。
solution:Upgrade redhat openstack to a higher version than 12,13,and avoid the version 12,13; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.5,and avoid the version 7.5; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,and avoid the version 14.04,16.04,18.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade postgresql postgresql to a higher version than 9.3.24,9.4.19,9.5.14,9.6.10,10.5,and avoid the version [9.3.0,9.3.24),[9.4.0,9.4.19),[9.5.0,9.5.14),[9.6.0,9.6.10),[10.0,10.5)