CVE-2016-5424

CVE-2016-5424 is a high-severity vulnerability affecting multiple versions of PostgreSQL (before 9.1.23, 9.2.18, 9.3.14, 9.4.9, and 9.5.4). It allows remote authenticated users with CREATEDB or CREATEROLE privileges to escalate to superuser status. This is achieved by injecting special characters (double quote, backslash, carriage return, or newline) into database or role names, which are then mishandled during administrative operations. The vulnerability has a CVSS score of 7.1 (HIGH), indicating a network attack vector with high impact on confidentiality, integrity, and availability, though it requires user interaction and high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.