PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
CVSS Details
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-postgresqlalpine-linux-upgrade-postgresql14alpine-linux-upgrade-postgresql15 | Sep 20, 2017 | Aug 16, 2017 | |
| Amazon_linux | — | amazon-linux-upgrade--postgresql92amazon-linux-upgrade--postgresql95amazon-linux-upgrade-postgresql93amazon-linux-upgrade-postgresql94amazon-linux-upgrade-postgresql96 | Sep 1, 2017 | Aug 10, 2017 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Aug 16, 2017 | |
| Centos_linux | — | centos-upgrade-postgresqlcentos-upgrade-postgresql-contribcentos-upgrade-postgresql-debuginfocentos-upgrade-postgresql-develcentos-upgrade-postgresql-docscentos-upgrade-postgresql-libscentos-upgrade-postgresql-plperlcentos-upgrade-postgresql-plpythoncentos-upgrade-postgresql-pltclcentos-upgrade-postgresql-servercentos-upgrade-postgresql-staticcentos-upgrade-postgresql-testcentos-upgrade-postgresql-upgrade | Sep 15, 2017 | Aug 10, 2017 |
| Debian | debian-upgrade-postgresql-9-1debian-upgrade-postgresql-9-6 | Aug 12, 2017 | Aug 10, 2017 | |
| Freebsd | freebsd-upgrade-package-postgresql92-serverfreebsd-upgrade-package-postgresql93-serverfreebsd-upgrade-package-postgresql94-serverfreebsd-upgrade-package-postgresql95-serverfreebsd-upgrade-package-postgresql96-server | Aug 10, 2017 | Aug 10, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-db-postgresql | Oct 30, 2017 | Aug 16, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-postgresqlhuawei-euleros-2_0_sp1-upgrade-postgresql-contribhuawei-euleros-2_0_sp1-upgrade-postgresql-develhuawei-euleros-2_0_sp1-upgrade-postgresql-docshuawei-euleros-2_0_sp1-upgrade-postgresql-libshuawei-euleros-2_0_sp1-upgrade-postgresql-plperlhuawei-euleros-2_0_sp1-upgrade-postgresql-plpythonhuawei-euleros-2_0_sp1-upgrade-postgresql-pltclhuawei-euleros-2_0_sp1-upgrade-postgresql-serverhuawei-euleros-2_0_sp1-upgrade-postgresql-test | Nov 30, 2017 | Aug 16, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-postgresqlhuawei-euleros-2_0_sp2-upgrade-postgresql-contribhuawei-euleros-2_0_sp2-upgrade-postgresql-develhuawei-euleros-2_0_sp2-upgrade-postgresql-docshuawei-euleros-2_0_sp2-upgrade-postgresql-libshuawei-euleros-2_0_sp2-upgrade-postgresql-plperlhuawei-euleros-2_0_sp2-upgrade-postgresql-plpythonhuawei-euleros-2_0_sp2-upgrade-postgresql-pltclhuawei-euleros-2_0_sp2-upgrade-postgresql-serverhuawei-euleros-2_0_sp2-upgrade-postgresql-test | Nov 30, 2017 | Aug 16, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-postgresqloracle-linux-upgrade-postgresql-contriboracle-linux-upgrade-postgresql-develoracle-linux-upgrade-postgresql-docsoracle-linux-upgrade-postgresql-libsoracle-linux-upgrade-postgresql-plperloracle-linux-upgrade-postgresql-plpythonoracle-linux-upgrade-postgresql-pltcloracle-linux-upgrade-postgresql-serveroracle-linux-upgrade-postgresql-staticoracle-linux-upgrade-postgresql-testoracle-linux-upgrade-postgresql-upgrade | Sep 15, 2017 | Aug 10, 2017 |
| Postgres | postgres-upgrade-9_6_4 | Aug 17, 2017 | Aug 16, 2017 | |
| Redhat_linux | — | redhat-upgrade-postgresqlredhat-upgrade-postgresql-contribredhat-upgrade-postgresql-debuginforedhat-upgrade-postgresql-develredhat-upgrade-postgresql-docsredhat-upgrade-postgresql-libsredhat-upgrade-postgresql-plperlredhat-upgrade-postgresql-plpythonredhat-upgrade-postgresql-pltclredhat-upgrade-postgresql-serverredhat-upgrade-postgresql-staticredhat-upgrade-postgresql-testredhat-upgrade-postgresql-upgrade | Oct 4, 2017 | Aug 10, 2017 |
| Suse | — | suse-upgrade-libecpg6suse-upgrade-libpq5suse-upgrade-libpq5-32bitsuse-upgrade-postgresql10suse-upgrade-postgresql10-contribsuse-upgrade-postgresql10-develsuse-upgrade-postgresql10-docssuse-upgrade-postgresql10-plperlsuse-upgrade-postgresql10-plpythonsuse-upgrade-postgresql10-pltclsuse-upgrade-postgresql10-serversuse-upgrade-postgresql93suse-upgrade-postgresql93-contribsuse-upgrade-postgresql93-docssuse-upgrade-postgresql93-serversuse-upgrade-postgresql94suse-upgrade-postgresql94-contribsuse-upgrade-postgresql94-develsuse-upgrade-postgresql94-docssuse-upgrade-postgresql94-serversuse-upgrade-postgresql96suse-upgrade-postgresql96-contribsuse-upgrade-postgresql96-develsuse-upgrade-postgresql96-docssuse-upgrade-postgresql96-server | Aug 23, 2017 | Aug 10, 2017 |
| Ubuntu | ubuntu-upgrade-postgresql-9-3ubuntu-upgrade-postgresql-9-5ubuntu-upgrade-postgresql-9-6 | Aug 15, 2017 | Aug 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub