A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.
| Product | Vendor | Version |
|---|---|---|
| postgresql | The PostgreSQL Global Development Group | >= 4.3.0, < 4.3.4 |