Search CVE reports
11 – 14 of 14 results
CVE-2017-7546
Low priorityPostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
5 affected packages
postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-10 | — | — | — | Not affected | Not in release |
| postgresql-9.1 | — | — | — | Not in release | Not in release |
| postgresql-9.3 | — | — | — | Not in release | Not in release |
| postgresql-9.5 | — | — | — | Not in release | Fixed |
| postgresql-9.6 | — | — | — | Not in release | Not in release |
CVE-2017-7486
Low prioritySome fixes available 3 of 4
PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
4 affected packages
postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-9.1 | — | — | — | — | Not in release |
| postgresql-9.3 | — | — | — | — | Not in release |
| postgresql-9.5 | — | — | — | — | Fixed |
| postgresql-9.6 | — | — | — | — | Not in release |
CVE-2017-7485
Low prioritySome fixes available 3 of 4
In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An...
4 affected packages
postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-9.1 | — | — | — | — | Not in release |
| postgresql-9.3 | — | — | — | — | Not in release |
| postgresql-9.5 | — | — | — | — | Fixed |
| postgresql-9.6 | — | — | — | — | Not in release |
CVE-2017-7484
Low prioritySome fixes available 3 of 4
It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information...
5 affected packages
postgresql-10, postgresql-9.1, postgresql-9.3, postgresql-9.5, postgresql-9.6
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| postgresql-10 | — | — | — | Not affected | Not in release |
| postgresql-9.1 | — | — | — | Not in release | Not in release |
| postgresql-9.3 | — | — | — | Not in release | Not in release |
| postgresql-9.5 | — | — | — | Not in release | Fixed |
| postgresql-9.6 | — | — | — | Not in release | Not in release |