PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql14Upgrade postgresql15 | Sep 20, 2017 | Aug 16, 2017 |
| Amazon_linux | — | Upgrade postgresql95Upgrade postgresql94 | Sep 1, 2017 | Aug 10, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 16, 2017 |
| Debian | — | Upgrade postgresql-9.6 | Aug 12, 2017 | Aug 10, 2017 |
| Freebsd | — | Upgrade postgresql93-serverUpgrade postgresql94-serverUpgrade postgresql96-serverUpgrade postgresql95-serverUpgrade postgresql92-server | Aug 10, 2017 | Aug 10, 2017 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Aug 16, 2017 |
| Postgres | — | Upgrade to PostgreSQL version 9.6.4 | Aug 17, 2017 | Aug 16, 2017 |
| Suse | — | Upgrade postgresql10-pltclUpgrade postgresql93-docsUpgrade postgresql93Upgrade postgresql94-contribUpgrade libpq5-32bitUpgrade postgresql10-docsUpgrade postgresql94-docsUpgrade postgresql10-develUpgrade postgresql96-docsUpgrade postgresql10-plpythonUpgrade postgresql96-contribUpgrade postgresql94-develUpgrade postgresql94Upgrade libecpg6Upgrade postgresql10Upgrade postgresql93-contribUpgrade postgresql10-serverUpgrade postgresql96Upgrade postgresql94-serverUpgrade postgresql96-develUpgrade libpq5Upgrade postgresql10-plperlUpgrade postgresql93-serverUpgrade postgresql10-contribUpgrade postgresql96-server | Aug 23, 2017 | Aug 10, 2017 |
| Ubuntu | — | Upgrade postgresql-9.5Upgrade postgresql-9.6Upgrade postgresql-9.3 | Aug 15, 2017 | Aug 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub