PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql15Upgrade postgresql14 | Sep 20, 2017 | Aug 16, 2017 |
| Amazon_linux | — | Upgrade postgresql92Upgrade postgresql94Upgrade postgresql96Upgrade postgresql93Upgrade postgresql95 | Sep 1, 2017 | Aug 10, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 16, 2017 |
| Centos_linux | — | Upgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-test | Sep 15, 2017 | Aug 10, 2017 |
| Debian | — | Upgrade postgresql-9.1Upgrade postgresql-9.6 | Aug 12, 2017 | Aug 10, 2017 |
| Freebsd | — | Upgrade postgresql95-serverUpgrade postgresql92-serverUpgrade postgresql93-serverUpgrade postgresql96-serverUpgrade postgresql94-server | Aug 10, 2017 | Aug 10, 2017 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Aug 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-libs | Jan 18, 2018 | Aug 16, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-libs | Jan 18, 2018 | Aug 16, 2017 |
| Oracle_linux | — | Upgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-static | Sep 15, 2017 | Aug 10, 2017 |
| Postgres | — | Upgrade to PostgreSQL version 9.6.4 | Aug 17, 2017 | Aug 16, 2017 |
| Redhat_linux | — | Upgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-upgradeUpgrade postgresql-debuginfoUpgrade postgresql-staticNo solution exists | Oct 4, 2017 | Aug 10, 2017 |
| Suse | — | Upgrade postgresql96-contribUpgrade postgresql96-develUpgrade postgresql10-pltclUpgrade postgresql94-contribUpgrade postgresql10-develUpgrade postgresql10-docsUpgrade postgresql94-develUpgrade postgresql10-plperlUpgrade postgresql96-docsUpgrade libpq5-32bitUpgrade postgresql94-docsUpgrade postgresql93-docsUpgrade postgresql96-serverUpgrade postgresql93-contribUpgrade postgresql94-serverUpgrade postgresql10-plpythonUpgrade postgresql93Upgrade postgresql10-contribUpgrade postgresql10Upgrade postgresql94Upgrade postgresql10-serverUpgrade postgresql93-serverUpgrade postgresql96Upgrade libpq5Upgrade libecpg6 | Aug 23, 2017 | Aug 10, 2017 |
| Ubuntu | — | Upgrade postgresql-9.3Upgrade postgresql-9.6Upgrade postgresql-9.5 | Aug 15, 2017 | Aug 10, 2017 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub