The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privileges via a function that is (1) defined in another language or (2) not allowed to be directly called by the user due to permissions.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Sep 20, 2017 | Mar 31, 2014 |
| Centos_linux | — | Upgrade postgresql84-contribUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-plUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql84-serverUpgrade postgresql84-develUpgrade postgresql84-docsUpgrade postgresql84-pythonUpgrade postgresql84-tclUpgrade postgresql84-testUpgrade postgresql-pythonUpgrade postgresql84-pltclUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql84Upgrade postgresql-serverUpgrade postgresql84-plperlUpgrade postgresql-libsUpgrade postgresql-tclUpgrade postgresql84-plpythonUpgrade postgresql-plperlUpgrade postgresql84-libsUpgrade postgresql-test | Dec 1, 2016 | Mar 31, 2014 |
| Debian | — | Upgrade postgresql-plshUpgrade postgresql-8.4Upgrade postgresql-9.1 | Jul 30, 2024 | Mar 31, 2014 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Feb 20, 2014 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Mar 31, 2014 |
| Oracle_linux | — | Upgrade postgresql84Upgrade postgresql84-docsUpgrade postgresqlUpgrade postgresql84-plperlUpgrade postgresql84-plpythonUpgrade postgresql-testUpgrade postgresql84-testUpgrade postgresql-docsUpgrade postgresql84-contribUpgrade postgresql-contribUpgrade postgresql84-tclUpgrade postgresql-serverUpgrade postgresql84-serverUpgrade postgresql-plpythonUpgrade postgresql84-develUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql84-pltclUpgrade postgresql84-pythonUpgrade postgresql84-libs | Oct 16, 2024 | Mar 28, 2014 |
| Postgres | — | Upgrade to PostgreSQL version 9.3.3 | Apr 1, 2014 | Mar 31, 2014 |
| Suse | — | Upgrade postgresql94-develUpgrade postgresql91-contribUpgrade postgresql96-contribUpgrade postgresql96-docsUpgrade libpq5-32bitUpgrade postgresql93-docsUpgrade postgresql10-plpythonUpgrade postgresql96-serverUpgrade postgresql91-develUpgrade postgresql10-plperlUpgrade postgresql93-serverUpgrade postgresql93Upgrade postgresql93-develUpgrade postgresql10-pltclUpgrade postgresql94-serverUpgrade postgresql91-serverUpgrade postgresql10-serverUpgrade libpq5Upgrade postgresql91-docsUpgrade libecpg6Upgrade postgresql94Upgrade postgresql94-docsUpgrade postgresql10-docsUpgrade postgresql96Upgrade postgresql10-develUpgrade postgresql96-develUpgrade postgresql91Upgrade postgresql10Upgrade postgresql10-contribUpgrade postgresql94-contribUpgrade postgresql93-contrib | Dec 18, 2015 | Mar 28, 2014 |
| Ubuntu | — | Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Mar 31, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub