CVE ID:	CVE-2018-10925
Description:	It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with "INSERT ... ON CONFLICT DO UPDATE". An attacker with "CREATE TABLE" privileges could exploit this to read arbitrary bytes server memory. If the attacker also had certain "INSERT" and limited "UPDATE" privileges to a particular table, they could exploit this to update other columns in the same table.
Test IDs:	1.3.6.1.4.1.25623.1.0.813753   1.3.6.1.4.1.25623.1.0.704269   1.3.6.1.4.1.25623.1.0.813754
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10925 BugTraq ID: 105052 http://www.securityfocus.com/bid/105052 Debian Security Information: DSA-4269 (Google Search) https://www.debian.org/security/2018/dsa-4269 https://security.gentoo.org/glsa/201810-08 RedHat Security Advisories: RHSA-2018:2511 https://access.redhat.com/errata/RHSA-2018:2511 RedHat Security Advisories: RHSA-2018:2565 https://access.redhat.com/errata/RHSA-2018:2565 RedHat Security Advisories: RHSA-2018:2566 https://access.redhat.com/errata/RHSA-2018:2566 RedHat Security Advisories: RHSA-2018:3816 https://access.redhat.com/errata/RHSA-2018:3816 http://www.securitytracker.com/id/1041446 SuSE Security Announcement: openSUSE-SU-2020:1227 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00043.html https://usn.ubuntu.com/3744-1/