The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Feb 12, 2013 |
| Centos_linux | — | Upgrade postgresql84-plperlUpgrade postgresql84-plpythonUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql84-testUpgrade postgresql84-docsUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql84Upgrade postgresql-serverUpgrade postgresql84-pythonUpgrade postgresql84-pltclUpgrade postgresql-contribUpgrade postgresql84-contribUpgrade postgresql-plperlUpgrade postgresql84-libsUpgrade postgresql-plpythonUpgrade postgresql84-develUpgrade postgresql-develUpgrade postgresql84-tclUpgrade postgresql-pltclUpgrade postgresql84-server | Dec 1, 2016 | Feb 12, 2013 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Feb 12, 2013 |
| Oracle_linux | — | Upgrade postgresql84-plperlUpgrade postgresql-testUpgrade postgresql84-pltclUpgrade postgresql84Upgrade postgresql84-testUpgrade postgresql84-develUpgrade postgresql84-contribUpgrade postgresqlUpgrade postgresql84-tclUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql84-pythonUpgrade postgresql84-docsUpgrade postgresql84-plpythonUpgrade postgresql-plpythonUpgrade postgresql84-libsUpgrade postgresql84-serverUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql-server | Oct 16, 2024 | Feb 13, 2013 |
| Postgres | — | Upgrade to PostgreSQL version 9.0.12Upgrade to PostgreSQL version 9.2.3Upgrade to PostgreSQL version 8.3.23Upgrade to PostgreSQL version 9.1.8Upgrade to PostgreSQL version 8.4.16 | Feb 24, 2013 | Feb 12, 2013 |
| Suse | — | Upgrade postgresql91-debugsourceUpgrade libpq5Upgrade postgresql91-devel-debuginfo-32bitUpgrade postgresql91-devel-debuginfo-x86Upgrade postgresql91-plperlUpgrade postgresql91-pltcl-debuginfoUpgrade postgresqlUpgrade libecpg6Upgrade libecpg6-debuginfoUpgrade libpq5-debuginfoUpgrade postgresql91-devel-32bitUpgrade libecpg6-32bitUpgrade libecpg6-debuginfo-32bitUpgrade postgresql91-docsUpgrade libpq5-debuginfo-x86Upgrade postgresql-serverUpgrade postgresql-contribUpgrade libecpg6-x86Upgrade libpq5-debuginfo-32bitUpgrade postgresql91Upgrade libpq5-32bitUpgrade postgresql91-pltclUpgrade postgresql91-libs-debugsourceUpgrade libecpg6-debuginfo-x86Upgrade postgresql91-develUpgrade postgresql91-contrib-debuginfoUpgrade postgresql91-plperl-debuginfoUpgrade postgresql-docsUpgrade postgresql91-debuginfoUpgrade sle-sdk-releaseUpgrade postgresql91-plpython-debuginfoUpgrade postgresql91-libsUpgrade postgresql91-plpythonUpgrade postgresql91-devel-debuginfoUpgrade postgresql91-contribUpgrade postgresql91-server-debuginfoUpgrade postgresql91-serverUpgrade libpq5-x86 | Dec 12, 2013 | Feb 12, 2013 |
| Ubuntu | — | Upgrade postgresql-9.1Upgrade postgresql-8.4Upgrade postgresql-8.3 | Nov 8, 2024 | Feb 13, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub