Search CVE reports

Toggle filters

51 – 60 of 62 results

CVE-2017-7548

Medium priority
Fixed

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a...

5 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-10 — — — Not affected
postgresql-9.1 — — — Not in release
postgresql-9.3 — — — Not in release
postgresql-9.5 — — — Not in release
postgresql-9.6 — — — Not in release
Show less packages

CVE-2017-7547

Medium priority
Fixed

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners...

5 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-10 — — — Not affected
postgresql-9.1 — — — Not in release
postgresql-9.3 — — — Not in release
postgresql-9.5 — — — Not in release
postgresql-9.6 — — — Not in release
Show less packages

CVE-2017-7546

Low priority
Fixed

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

5 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-10 — — — Not affected
postgresql-9.1 — — — Not in release
postgresql-9.3 — — — Not in release
postgresql-9.5 — — — Not in release
postgresql-9.6 — — — Not in release
Show less packages

CVE-2017-7486

Low priority

Some fixes available 3 of 4

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

4 affected packages

postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.5 — — — —
postgresql-9.6 — — — —
Show less packages

CVE-2017-7485

Low priority

Some fixes available 3 of 4

In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An...

4 affected packages

postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.5 — — — —
postgresql-9.6 — — — —
Show less packages

CVE-2017-7484

Low priority

Some fixes available 3 of 4

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information...

5 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-10 — — — Not affected
postgresql-9.1 — — — Not in release
postgresql-9.3 — — — Not in release
postgresql-9.5 — — — Not in release
postgresql-9.6 — — — Not in release
Show less packages

CVE-2016-5424

Medium priority

Some fixes available 4 of 5

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) ”...

4 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.5 — — — —
Show less packages

CVE-2016-5423

Medium priority

Some fixes available 4 of 5

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain...

4 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.5 — — — —
Show less packages

CVE-2016-3065

Medium priority
Not affected

The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server...

5 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.4 — — — —
postgresql-9.5 — — — —
Show less packages

CVE-2016-2193

Medium priority
Not affected

PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.

5 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
postgresql-8.4 — — — —
postgresql-9.1 — — — —
postgresql-9.3 — — — —
postgresql-9.4 — — — —
postgresql-9.5 — — — —
Show less packages
  1. Previous page
  2. 3
  3. 4
  4. 5
  5. 6
  6. 7
  7. Next page
Export to JSON