Search CVE reports
51 – 58 of 58 results
CVE-2017-7485
Low prioritySome fixes available 3 of 4
In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An...
4 affected packages
postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-9.1 | — | — | — | — | Not in release |
| postgresql-9.3 | — | — | — | — | Not in release |
| postgresql-9.5 | — | — | — | — | Fixed |
| postgresql-9.6 | — | — | — | — | Not in release |
CVE-2017-7484
Low prioritySome fixes available 3 of 4
It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information...
5 affected packages
postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-10 | — | — | — | Not affected | Not in release |
| postgresql-9.1 | — | — | — | Not in release | Not in release |
| postgresql-9.3 | — | — | — | Not in release | Not in release |
| postgresql-9.5 | — | — | — | Not in release | Fixed |
| postgresql-9.6 | — | — | — | Not in release | Not in release |
CVE-2016-5424
Medium prioritySome fixes available 4 of 5
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) "...
4 affected packages
postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.5
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-8.4 | — | — | — | — | Not in release |
| postgresql-9.1 | — | — | — | — | Not in release |
| postgresql-9.3 | — | — | — | — | Not in release |
| postgresql-9.5 | — | — | — | — | Fixed |
CVE-2016-5423
Medium prioritySome fixes available 4 of 5
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain...
4 affected packages
postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.5
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-8.4 | — | — | — | — | Not in release |
| postgresql-9.1 | — | — | — | — | Not in release |
| postgresql-9.3 | — | — | — | — | Not in release |
| postgresql-9.5 | — | — | — | — | Fixed |
CVE-2016-3065
Medium priorityThe (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in PostgreSQL before 9.5.x before 9.5.2 allows attackers to bypass intended access restrictions and consequently obtain sensitive server...
5 affected packages
postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-8.4 | — | — | — | — | — |
| postgresql-9.1 | — | — | — | — | — |
| postgresql-9.3 | — | — | — | — | — |
| postgresql-9.4 | — | — | — | — | — |
| postgresql-9.5 | — | — | — | — | — |
CVE-2016-2193
Medium priorityPostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.
5 affected packages
postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-8.4 | — | — | — | — | — |
| postgresql-9.1 | — | — | — | — | — |
| postgresql-9.3 | — | — | — | — | — |
| postgresql-9.4 | — | — | — | — | — |
| postgresql-9.5 | — | — | — | — | — |
CVE-2016-0773
Medium prioritySome fixes available 4 of 6
PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 allows remote attackers to cause a denial of service (infinite loop or buffer overflow and crash) via a large Unicode...
5 affected packages
postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-8.4 | — | — | — | — | Not in release |
| postgresql-9.1 | — | — | — | — | Not in release |
| postgresql-9.3 | — | — | — | — | Not in release |
| postgresql-9.4 | — | — | — | — | Not in release |
| postgresql-9.5 | — | — | — | — | Not affected |
CVE-2016-0766
Medium prioritySome fixes available 4 of 6
PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which...
5 affected packages
postgresql-8.4, postgresql-9.1, postgresql-9.3, postgresql-9.4, postgresql-9.5
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-8.4 | — | — | — | — | Not in release |
| postgresql-9.1 | — | — | — | — | Not in release |
| postgresql-9.3 | — | — | — | — | Not in release |
| postgresql-9.4 | — | — | — | — | Not in release |
| postgresql-9.5 | — | — | — | — | Not affected |