CVE search results

51 – 60 of 76 results

Detailed view

Sort by:

CVE-2017-7485

Low priority

Some fixes available 3 of 4

In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An...

4 affected packages

postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
postgresql-9.1	—	—	—	—	Not in release
postgresql-9.3	—	—	—	—	Not in release
postgresql-9.5	—	—	—	—	Fixed
postgresql-9.6	—	—	—	—	Not in release

CVE-2017-7484

Low priority

Some fixes available 3 of 4

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information...

5 affected packages

postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
postgresql-10	—	—	—	Not affected	Not in release
postgresql-9.1	—	—	—	Not in release	Not in release
postgresql-9.3	—	—	—	Not in release	Not in release
postgresql-9.5	—	—	—	Not in release	Fixed
postgresql-9.6	—	—	—	Not in release	Not in release

CVE-2016-5424

Medium priority

Some fixes available 4 of 5

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) "...

4 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
postgresql-8.4	—	—	—	—	Not in release
postgresql-9.1	—	—	—	—	Not in release
postgresql-9.3	—	—	—	—	Not in release
postgresql-9.5	—	—	—	—	Fixed

CVE-2016-5423

Medium priority

Some fixes available 4 of 5

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain...

4 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
postgresql-8.4	—	—	—	—	Not in release
postgresql-9.1	—	—	—	—	Not in release
postgresql-9.3	—	—	—	—	Not in release
postgresql-9.5	—	—	—	—	Fixed

CVE-2016-3065

Medium priority

Not affected

The (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server...

5 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
postgresql-8.4	—	—	—	—	—
postgresql-9.1	—	—	—	—	—
postgresql-9.3	—	—	—	—	—
postgresql-9.4	—	—	—	—	—
postgresql-9.5	—	—	—	—	—

CVE-2016-2193

Medium priority

Not affected

PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.

5 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
postgresql-8.4	—	—	—	—	—
postgresql-9.1	—	—	—	—	—
postgresql-9.3	—	—	—	—	—
postgresql-9.4	—	—	—	—	—
postgresql-9.5	—	—	—	—	—

CVE-2016-0773

Medium priority

Some fixes available 4 of 6

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode...

5 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
postgresql-8.4	—	—	—	—	Not in release
postgresql-9.1	—	—	—	—	Not in release
postgresql-9.3	—	—	—	—	Not in release
postgresql-9.4	—	—	—	—	Not in release
postgresql-9.5	—	—	—	—	Not affected

CVE-2016-0766

Medium priority

Some fixes available 4 of 6

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which...

5 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
postgresql-8.4	—	—	—	—	Not in release
postgresql-9.1	—	—	—	—	Not in release
postgresql-9.3	—	—	—	—	Not in release
postgresql-9.4	—	—	—	—	Not in release
postgresql-9.5	—	—	—	—	Not affected

CVE-2015-5289

Medium priority

Some fixes available 4 of 5

Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cause a denial of service (server crash) via unspecified vectors, which are not properly...

4 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
postgresql-8.4	—	—	—	—	Not in release
postgresql-9.1	—	—	—	—	Not in release
postgresql-9.3	—	—	—	—	Not in release
postgresql-9.4	—	—	—	—	Not in release

CVE-2015-5288

Low priority

Some fixes available 4 of 5

The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x before 9.4.5 allows attackers to cause a denial of service (server crash) or...

4 affected packages

postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS	16.04 LTS
postgresql-8.4	—	—	—	—	Not in release
postgresql-9.1	—	—	—	—	Not in release
postgresql-9.3	—	—	—	—	Not in release
postgresql-9.4	—	—	—	—	Not in release

Export to JSON

Results by page:

Search CVE reports