Browse CVEs

MEDIUM 6.4 CVE-2015-5288 The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9… PostgreSQL after 9.0.22 Fix from $1,6002015-10-26 MEDIUM 6.5 CVE-2014-2669 Multiple integer overflows in contrib/hstore/hstore_io.c in PostgreSQL 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before… PostgreSQL Patch available Fix from $1,6002014-03-31 MEDIUM 6.5 CVE-2014-0061 The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7,… PostgreSQL after 8.4.19 Fix from $1,6002014-03-31 MEDIUM 6.5 CVE-2014-0063EPSS 7% Multiple stack-based buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3… PostgreSQL after 8.4.19 Fix from $1,6002014-03-31 MEDIUM 6.5 CVE-2014-0064EPSS 5% Multiple integer overflows in the path_in and other unspecified functions in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.… PostgreSQL after 8.4.19 Fix from $1,6002014-03-31 MEDIUM 6.5 CVE-2014-0065EPSS 5% Multiple buffer overflows in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow rem… PostgreSQL after 8.4.19 Fix from $1,6002014-03-31 HIGH 10.0 CVE-2013-1902 PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary fi… PostgreSQL Mitigation only Fix from $1,9502013-04-04 HIGH 10.0 CVE-2013-1903 PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides t… PostgreSQL Mitigation only Fix from $1,9502013-04-04 HIGH 8.5 CVE-2013-1900 PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random … PostgreSQL Mitigation only Fix from $1,9502013-04-04 MEDIUM 6.5 CVE-2013-1899EPSS 54% Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a den… PostgreSQL Mitigation only Fix from $1,6002013-04-04 MEDIUM 6.8 CVE-2013-0255 PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the en… PostgreSQL Mitigation only Fix from $1,6002013-02-13 HIGH 7.5 CVE-2012-1618 Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled,… PostgreSQL Mitigation only Fix from $1,9502012-10-06 MEDIUM 6.5 CVE-2012-3489 The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and … PostgreSQL 8.3.20 / 8.4.13+ Fix from $1,6002012-10-03 MEDIUM 6.8 CVE-2012-0868 CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows use… PostgreSQL Mitigation only Fix from $1,6002012-07-18 MEDIUM 6.5 CVE-2012-0866 CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute… PostgreSQL Mitigation only Fix from $1,6002012-07-18 MEDIUM 6.5 CVE-2010-4015 Buffer overflow in the gettoken function in contrib/intarray/_int_bool.c in the intarray array module in PostgreSQL 9.0.x before 9.0.3, 8.4.x before … PostgreSQL Mitigation only Fix from $1,6002011-02-02 MEDIUM 6.0 CVE-2010-3433 The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before 8.3.12, 8… PostgreSQL Patch available Fix from $1,6002010-10-06 HIGH 8.5 CVE-2010-1447 The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.… PostgreSQL Patch available Fix from $1,9502010-05-19 MEDIUM 6.0 CVE-2010-1170 The PL/Tcl implementation in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4… PostgreSQL Patch available Fix from $1,6002010-05-19 MEDIUM 5.5 CVE-2010-1975 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly chec… PostgreSQL Mitigation only Fix from $1,6002010-05-19 HIGH 8.5 CVE-2010-1169 PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 B… PostgreSQL Patch available Fix from $1,9502010-05-19 MEDIUM 6.5 CVE-2010-0442EPSS 13% The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of s… PostgreSQL 7.4.28 / 8.0.24+ Fix from $1,6002010-02-02 MEDIUM 6.5 CVE-2009-4136 PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not pr… PostgreSQL Patch available Fix from $1,6002009-12-15 MEDIUM 5.8 CVE-2009-4034 PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not pr… PostgreSQL Patch available Fix from $1,6002009-12-15 MEDIUM 6.8 CVE-2009-3231EPSS 8% The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote at… PostgreSQL 8.2.14 / 8.3.8+ Fix from $1,6002009-09-17 MEDIUM 6.5 CVE-2009-3230 The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7… PostgreSQL Mitigation only Fix from $1,6002009-09-17 HIGH 7.2 CVE-2007-6601 The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or… PostgreSQL 7.3.21 / 7.4.19+ Fix from $1,9502008-01-09 MEDIUM 6.8 CVE-2007-4769 The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.… PostgreSQL after 8.4.16 Fix from $1,6002008-01-09 MEDIUM 6.8 CVE-2007-6067 Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11… PostgreSQL after 8.4.16 Fix from $1,6002008-01-09 MEDIUM 6.5 CVE-2007-6600 PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of tabl… PostgreSQL Patch available Fix from $1,6002008-01-09