The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Sep 20, 2017 | Mar 31, 2014 |
| Centos_linux | — | Upgrade postgresql-contribUpgrade postgresql84-develUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql84-plpythonUpgrade postgresql84-pythonUpgrade postgresql-develUpgrade postgresql84-docsUpgrade postgresql84-contribUpgrade postgresql84-serverUpgrade postgresql-tclUpgrade postgresql84-libsUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql84-testUpgrade postgresql84Upgrade postgresql-libsUpgrade postgresql-pythonUpgrade postgresqlUpgrade postgresql84-tclUpgrade postgresql-testUpgrade postgresql-plUpgrade postgresql84-pltclUpgrade postgresql84-plperl | Dec 1, 2016 | Mar 31, 2014 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Feb 20, 2014 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Mar 31, 2014 |
| Oracle_linux | — | Upgrade postgresql84-contribUpgrade postgresql84-plpythonUpgrade postgresql-docsUpgrade postgresql84-libsUpgrade postgresql-develUpgrade postgresql84Upgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql84-pltclUpgrade postgresql84-testUpgrade postgresql84-tclUpgrade postgresql84-develUpgrade postgresql-plpythonUpgrade postgresql84-plperlUpgrade postgresql84-pythonUpgrade postgresql84-docsUpgrade postgresql-pltclUpgrade postgresql84-server | Oct 16, 2024 | Mar 28, 2014 |
| Postgres | — | Upgrade to PostgreSQL version 9.3.3 | Apr 1, 2014 | Mar 31, 2014 |
| Suse | — | Upgrade postgresql91-develUpgrade postgresql93-develUpgrade postgresql91Upgrade postgresql10-serverUpgrade postgresql10-contribUpgrade postgresql91-contribUpgrade postgresql91-serverUpgrade postgresql96-serverUpgrade postgresql93-contribUpgrade libpq5Upgrade postgresql10Upgrade postgresql96-docsUpgrade postgresql93-docsUpgrade postgresql91-docsUpgrade postgresql10-plperlUpgrade libecpg6Upgrade postgresql96-develUpgrade libpq5-32bitUpgrade postgresql10-develUpgrade postgresql93-serverUpgrade postgresql94-develUpgrade postgresql10-plpythonUpgrade postgresql94Upgrade postgresql96-contribUpgrade postgresql94-contribUpgrade postgresql93Upgrade postgresql94-serverUpgrade postgresql96Upgrade postgresql94-docsUpgrade postgresql10-pltclUpgrade postgresql10-docs | Dec 18, 2015 | Mar 28, 2014 |
| Ubuntu | — | Upgrade postgresql-8.4Upgrade postgresql-9.1 | Nov 8, 2024 | Mar 31, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub