Search CVE reports

Toggle filters

1 – 10 of 16 results

CVE-2015-0242

Low priority
Not affected

Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1, when running on a Windows system, allows remote...

2 affected packages

postgresql-9.1, postgresql-9.4

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-9.1 — — — —
postgresql-9.4 — — — —
Show less packages

CVE-2018-1052

Medium priority
Not affected

Memory disclosure vulnerability in table partitioning was found in postgresql 10.x before 10.2, allowing an authenticated attacker to read arbitrary bytes of server memory via purpose-crafted insert to a partitioned table.

4 affected packages

postgresql-10, postgresql-9.1, postgresql-9.4, postgresql-9.6

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-10 — — — —
postgresql-9.1 — — — —
postgresql-9.4 — — — —
postgresql-9.6 — — — —
Show less packages

CVE-2018-1053

Low priority
Fixed

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_dumpall -g` under umask which...

6 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5, postgresql-9.6

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-10 — — — Not affected
postgresql-9.1 — — — Not in release
postgresql-9.3 — — — Not in release
postgresql-9.4 — — — Not in release
postgresql-9.5 — — — Not in release
postgresql-9.6 — — — Not in release
Show less packages

CVE-2016-3065

Medium priority
Not affected

The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server...

5 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.4 — — — —
postgresql-9.5 — — — —
Show less packages

CVE-2016-2193

Medium priority
Not affected

PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.

5 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.4 — — — —
postgresql-9.5 — — — —
Show less packages

CVE-2016-0773

Medium priority

Some fixes available 4 of 6

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode...

5 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.4 — — — —
postgresql-9.5 — — — —
Show less packages

CVE-2016-0766

Medium priority

Some fixes available 4 of 6

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which...

5 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.4 — — — —
postgresql-9.5 — — — —
Show less packages

CVE-2015-5289

Medium priority

Some fixes available 4 of 5

Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cause a denial of service (server crash) via unspecified vectors, which are not properly...

4 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.4 — — — —
Show less packages

CVE-2015-5288

Low priority

Some fixes available 4 of 5

The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or...

4 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.4 — — — —
Show less packages

CVE-2015-3167

Medium priority

Some fixes available 6 of 7

contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses different error responses when an incorrect key is used, which makes it easier for attackers...

4 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.4 — — — —
Show less packages
  1. Previous page
  2. 1
  3. 2
  4. Next page
Export to JSON