CVE-2018-18446 is a vulnerability that affects the popular open-source database management system, PostgreSQL. Specifically, it is a buffer overflow vulnerability in the JSON functions of PostgreSQL, which can be exploited by an attacker to execute arbitrary code on the affected system. This vulnerability was assigned a CVSS score of 7.5, which means it is categorized as a high-severity vulnerability.
The vulnerability was initially discovered by a researcher in December 2018 and reported to the PostgreSQL security team. A patch was released soon after to address the vulnerability. However, it wasn't until March 2019 that the vulnerability was publicly disclosed, giving attackers several months to potentially exploit the vulnerability before it was made widely known.
As with many vulnerabilities, it is essential for organizations using PostgreSQL to stay up-to-date with patches and security updates to ensure their systems are not vulnerable to known exploits. In the case of CVE-2018-18446, prompt action was taken to provide a patch for the vulnerability, but delays in public disclosure could have put some organizations at risk.