PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Apr 4, 2013 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Aug 28, 2015 | Apr 4, 2013 |
| Apple Osx Postgresql | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Sep 17, 2013 | Apr 4, 2013 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Apr 4, 2013 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Apr 4, 2013 |
| Postgres | — | Upgrade to PostgreSQL version 9.2.4Upgrade to PostgreSQL version 9.1.9 | Apr 5, 2013 | Apr 4, 2013 |
| Suse | — | Upgrade postgresql91-plpython-debuginfoUpgrade postgresql92-serverUpgrade postgresql91-devel-debuginfo-32bitUpgrade postgresql91-devel-32bitUpgrade postgresql91-docsUpgrade libecpg6Upgrade postgresql91-plpythonUpgrade libecpg6-debuginfo-x86Upgrade postgresql91-serverUpgrade libecpg6-x86Upgrade libpq5Upgrade postgresql92-contribUpgrade postgresql91Upgrade postgresql92-develUpgrade libecpg6-32bitUpgrade sle-sdk-releaseUpgrade postgresql91-develUpgrade postgresql91-pltcl-debuginfoUpgrade postgresql92-libsUpgrade postgresql91-plperlUpgrade libpq5-32bitUpgrade postgresql92-pltclUpgrade postgresql92-plperlUpgrade postgresql92-plpythonUpgrade postgresql91-server-debuginfoUpgrade libpq5-debuginfo-x86Upgrade libecpg6-debuginfoUpgrade postgresql92Upgrade libpq5-debuginfo-32bitUpgrade postgresql91-plperl-debuginfoUpgrade postgresql91-libsUpgrade postgresql91-debugsourceUpgrade postgresql92-docsUpgrade libpq5-debuginfoUpgrade postgresql91-libs-debugsourceUpgrade postgresql91-devel-debuginfo-x86Upgrade postgresql91-debuginfoUpgrade postgresql91-pltclUpgrade postgresql91-devel-debuginfoUpgrade postgresql91-contrib-debuginfoUpgrade libecpg6-debuginfo-32bitUpgrade libpq5-x86Upgrade postgresql91-contrib | Feb 17, 2015 | Apr 4, 2013 |
| Ubuntu | — | Upgrade postgresql-8.4Upgrade postgresql-9.1Upgrade postgresql-8.3 | Nov 8, 2024 | Apr 4, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub