CVE search results

41 – 50 of 64 results

Detailed view

Sort by:

CVE-2019-10128

Medium priority

Not affected

A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for EnterpriseDB-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it...

5 affected packages

postgresql-10, postgresql-11, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	—	Not affected
postgresql-11	—	—	—	Not in release
postgresql-9.1	—	—	—	Not in release
postgresql-9.3	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release

CVE-2019-10127

Medium priority

Not affected

A vulnerability was found in postgresql versions 11.x prior to 11.3. The Windows installer for BigSQL-supplied PostgreSQL does not lock down the ACL of the binary installation directory or the ACL of the data directory; it keeps...

5 affected packages

postgresql-10, postgresql-11, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	—	Not affected
postgresql-11	—	—	—	Not in release
postgresql-9.1	—	—	—	Not in release
postgresql-9.3	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release

CVE-2018-16850

Medium priority

Fixed

postgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to...

4 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	—	Fixed
postgresql-9.1	—	—	—	Not in release
postgresql-9.3	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release

CVE-2018-1115

Low priority

Some fixes available 1 of 2

postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn’t follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker...

5 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	—	Fixed
postgresql-9.1	—	—	—	Not in release
postgresql-9.3	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release
postgresql-9.6	—	—	—	Not in release

CVE-2018-10925

Medium priority

Fixed

It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain statements involved with “INSERT ... ON CONFLICT DO UPDATE”. An attacker with “CREATE...

4 affected packages

postgresql-9.1, postgresql-10, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-9.1	—	—	—	Not in release
postgresql-10	—	—	—	Fixed
postgresql-9.3	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release

CVE-2018-10915

Medium priority

Fixed

A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with “host” or “hostaddr” connection...

4 affected packages

postgresql-9.1, postgresql-10, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-9.1	—	—	—	Not in release
postgresql-10	—	—	—	Fixed
postgresql-9.3	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release

CVE-2018-1058

Medium priority

Fixed

A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database....

5 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	—	Fixed
postgresql-9.1	—	—	—	Not in release
postgresql-9.3	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release
postgresql-9.6	—	—	—	Not in release

CVE-2018-1053

Low priority

Fixed

In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containing the output of `pg_dumpall -g` under umask which...

6 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5, postgresql-9.6

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	—	Not affected
postgresql-9.1	—	—	—	Not in release
postgresql-9.3	—	—	—	Not in release
postgresql-9.4	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release
postgresql-9.6	—	—	—	Not in release

CVE-2017-7548

Medium priority

Fixed

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a...

5 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	—	Not affected
postgresql-9.1	—	—	—	Not in release
postgresql-9.3	—	—	—	Not in release
postgresql-9.5	—	—	—	Not in release
postgresql-9.6	—	—	—	Not in release

CVE-2017-7547

Medium priority

Fixed

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners...

5 affected packages

postgresql-10, postgresql-9.5, postgresql-9.1, postgresql-9.3, postgresql-9.6

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
postgresql-10	—	—	—	Not affected
postgresql-9.5	—	—	—	Not in release
postgresql-9.1	—	—	—	Not in release
postgresql-9.3	—	—	—	Not in release
postgresql-9.6	—	—	—	Not in release

Export to JSON

Results by page:

Search CVE reports