The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privileges via a function that is (1) defined in another language or (2) not allowed to be directly called by the user due to permissions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Sep 20, 2017 | Mar 31, 2014 |
| Centos_linux | — | Upgrade postgresql-testUpgrade postgresql84-plperlUpgrade postgresql84-plpythonUpgrade postgresql-tclUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql84Upgrade postgresql-plperlUpgrade postgresql84-libsUpgrade postgresql-docsUpgrade postgresql84-tclUpgrade postgresql-contribUpgrade postgresql84-pltclUpgrade postgresql84-pythonUpgrade postgresql-pltclUpgrade postgresql-plUpgrade postgresql84-serverUpgrade postgresql84-docsUpgrade postgresql-develUpgrade postgresql84-develUpgrade postgresql-plpythonUpgrade postgresql84-contribUpgrade postgresql-pythonUpgrade postgresql84-test | Dec 1, 2016 | Mar 31, 2014 |
| Debian | — | Upgrade postgresql-plshUpgrade postgresql-8.4Upgrade postgresql-9.1 | Jul 30, 2024 | Mar 31, 2014 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Feb 20, 2014 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Mar 31, 2014 |
| Oracle_linux | — | Upgrade postgresql84-testUpgrade postgresql84-plperlUpgrade postgresqlUpgrade postgresql84-docsUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql84-plpythonUpgrade postgresql84Upgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql84-pltclUpgrade postgresql84-tclUpgrade postgresql84-contribUpgrade postgresql84-libsUpgrade postgresql84-serverUpgrade postgresql-plpythonUpgrade postgresql84-pythonUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql84-develUpgrade postgresql-plperlUpgrade postgresql-libs | Oct 16, 2024 | Mar 28, 2014 |
| Postgres | — | Upgrade to PostgreSQL version 9.3.3 | Apr 1, 2014 | Mar 31, 2014 |
| Suse | — | Upgrade postgresql96-serverUpgrade libpq5-32bitUpgrade postgresql93-docsUpgrade postgresql91-develUpgrade postgresql10-plperlUpgrade postgresql96-docsUpgrade postgresql94-serverUpgrade postgresql10-pltclUpgrade postgresql93-develUpgrade postgresql96-contribUpgrade postgresql10-plpythonUpgrade postgresql91-contribUpgrade postgresql94-develUpgrade postgresql93Upgrade postgresql93-serverUpgrade postgresql10-serverUpgrade postgresql96Upgrade postgresql10-develUpgrade postgresql91Upgrade postgresql10-docsUpgrade postgresql91-docsUpgrade postgresql91-serverUpgrade postgresql10Upgrade postgresql10-contribUpgrade postgresql96-develUpgrade postgresql94-docsUpgrade libecpg6Upgrade postgresql94Upgrade postgresql94-contribUpgrade postgresql93-contribUpgrade libpq5 | Dec 18, 2015 | Mar 28, 2014 |
| Ubuntu | — | Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Mar 31, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub