PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Apr 4, 2013 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Aug 28, 2015 | Apr 4, 2013 |
| Apple Osx Postgresql | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Sep 17, 2013 | Apr 4, 2013 |
| Centos_linux | — | Upgrade postgresql84-contribUpgrade postgresql84Upgrade postgresql84-testUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql84-plpythonUpgrade postgresql-docsUpgrade postgresql84-develUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql84-libsUpgrade postgresql84-docsUpgrade postgresql84-pythonUpgrade postgresql84-serverUpgrade postgresql84-tclUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql84-pltclUpgrade postgresql84-plperlUpgrade postgresql | Dec 1, 2016 | Apr 4, 2013 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Apr 4, 2013 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Apr 4, 2013 |
| Oracle_linux | — | Upgrade postgresql84-develUpgrade postgresql-libsUpgrade postgresql84-pltclUpgrade postgresql84-serverUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresqlUpgrade postgresql84-libsUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql84-pythonUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql84-testUpgrade postgresql84-contribUpgrade postgresql84-docsUpgrade postgresql-testUpgrade postgresql84Upgrade postgresql-develUpgrade postgresql84-plpythonUpgrade postgresql84-plperlUpgrade postgresql84-tcl | Oct 16, 2024 | Apr 4, 2013 |
| Postgres | — | Upgrade to PostgreSQL version 9.2.4Upgrade to PostgreSQL version 9.1.9Upgrade to PostgreSQL version 8.4.17Upgrade to PostgreSQL version 9.0.13 | Apr 5, 2013 | Apr 4, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 4, 2013 |
| Suse | — | Upgrade postgresql91-debuginfoUpgrade libpq5-debuginfo-32bitUpgrade postgresql91-devel-debuginfo-x86Upgrade postgresql92-develUpgrade sle-sdk-releaseUpgrade postgresql91-plperl-debuginfoUpgrade postgresql91-devel-debuginfoUpgrade libpq5Upgrade libecpg6-32bitUpgrade postgresql91-libsUpgrade postgresql91-develUpgrade postgresql92-plperlUpgrade postgresql92-docsUpgrade postgresql91-contribUpgrade postgresql91-contrib-debuginfoUpgrade libpq5-x86Upgrade libpq5-32bitUpgrade libecpg6-debuginfo-32bitUpgrade postgresql91-devel-debuginfo-32bitUpgrade postgresql91-pltcl-debuginfoUpgrade libecpg6-debuginfo-x86Upgrade postgresql91Upgrade libecpg6Upgrade postgresql92-plpythonUpgrade postgresql91-pltclUpgrade libpq5-debuginfoUpgrade postgresql92-contribUpgrade postgresql91-devel-32bitUpgrade postgresql91-plpythonUpgrade postgresql92-libsUpgrade libecpg6-debuginfoUpgrade postgresql91-server-debuginfoUpgrade libecpg6-x86Upgrade libpq5-debuginfo-x86Upgrade postgresql91-libs-debugsourceUpgrade postgresql91-plperlUpgrade postgresql91-debugsourceUpgrade postgresql91-serverUpgrade postgresql92Upgrade postgresql91-plpython-debuginfoUpgrade postgresql92-serverUpgrade postgresql91-docsUpgrade postgresql92-pltcl | Feb 17, 2015 | Apr 4, 2013 |
| Ubuntu | — | Upgrade postgresql-8.3Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Apr 4, 2013 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub