The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The chkpass extension in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly check the return value of the crypt library function, which allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Sep 20, 2017 | Mar 31, 2014 |
| Centos_linux | — | Upgrade postgresql84-docsUpgrade postgresql-contribUpgrade postgresql84-plpythonUpgrade postgresql84-libsUpgrade postgresql-tclUpgrade postgresql84-serverUpgrade postgresql84-develUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql84-pythonUpgrade postgresql84-contribUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql84-testUpgrade postgresql84-pltclUpgrade postgresql-plUpgrade postgresql84-tclUpgrade postgresql84Upgrade postgresql-libsUpgrade postgresql-pythonUpgrade postgresql84-plperlUpgrade postgresql-plperl | Dec 1, 2016 | Mar 31, 2014 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Feb 20, 2014 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Mar 31, 2014 |
| Oracle_linux | — | Upgrade postgresql84-develUpgrade postgresql-plpythonUpgrade postgresql84-docsUpgrade postgresql84-testUpgrade postgresql84-pythonUpgrade postgresql-pltclUpgrade postgresql84-plperlUpgrade postgresql84-serverUpgrade postgresql-contribUpgrade postgresql84-tclUpgrade postgresql84-pltclUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql84-contribUpgrade postgresql-develUpgrade postgresql84Upgrade postgresql84-plpythonUpgrade postgresql84-libsUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql | Oct 16, 2024 | Mar 28, 2014 |
| Postgres | — | Upgrade to PostgreSQL version 9.3.3 | Apr 1, 2014 | Mar 31, 2014 |
| Suse | — | Upgrade postgresql96-serverUpgrade postgresql91Upgrade postgresql91-develUpgrade postgresql93-develUpgrade postgresql91-contribUpgrade postgresql91-serverUpgrade postgresql10-contribUpgrade libpq5Upgrade postgresql93-contribUpgrade postgresql10Upgrade postgresql10-serverUpgrade postgresql93Upgrade postgresql94-docsUpgrade postgresql96-contribUpgrade postgresql96-docsUpgrade postgresql94-develUpgrade postgresql93-serverUpgrade postgresql10-plpythonUpgrade postgresql94-contribUpgrade postgresql10-pltclUpgrade postgresql91-docsUpgrade postgresql96Upgrade postgresql94Upgrade postgresql10-docsUpgrade postgresql93-docsUpgrade postgresql96-develUpgrade libpq5-32bitUpgrade postgresql94-serverUpgrade libecpg6Upgrade postgresql10-plperlUpgrade postgresql10-devel | Dec 18, 2015 | Mar 28, 2014 |
| Ubuntu | — | Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Mar 31, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub