Description
run_maintenance() iterates every row in part_config in a FOR loop so an exception failure on a single row propagates straight to the outer EXCEPTION WHEN OTHERS handler which sits outside the loop. The loop terminates immediately, skipping every subsequent partition set. A partman_user can therefore disable partition maintenance database-wide with a single UPDATE and a one-second-effort poison value.
Vulnerability Information
- Product / Framework: PostgreSQL pg_partman
- Vendor Domain: www.postgresql.org
- Vulnerability Type: Configuration
- CVE Details: View Full CVE Details →