CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade postgresql-develUpgrade postgresql-tclUpgrade postgresql84-testUpgrade postgresql84-pltclUpgrade postgresql84-contribUpgrade postgresql84-tclUpgrade postgresql-plUpgrade postgresql84-docsUpgrade postgresql84-serverUpgrade postgresql84-develUpgrade postgresql84-pythonUpgrade postgresql-pythonUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql84Upgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-pltclUpgrade postgresql84-plperlUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql84-libsUpgrade postgresql84-plpythonUpgrade postgresql-plperl | Dec 1, 2016 | Jul 18, 2012 |
| Freebsd | — | Upgrade postgresql-client | Dec 10, 2025 | Feb 28, 2012 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Jul 18, 2012 |
| Oracle_linux | — | Upgrade postgresql-testUpgrade postgresql-tclUpgrade postgresql-pythonUpgrade postgresql84-plperlUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql84-libsUpgrade postgresql84-plpythonUpgrade postgresqlUpgrade postgresql-plUpgrade postgresql84-tclUpgrade postgresql84-testUpgrade postgresql84Upgrade postgresql84-develUpgrade postgresql84-contribUpgrade postgresql84-pythonUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql84-docsUpgrade postgresql84-serverUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql84-pltcl | Oct 16, 2024 | Jul 18, 2012 |
| Postgres | — | Upgrade to PostgreSQL version 8.4.11Upgrade to PostgreSQL version 9.0.7Upgrade to PostgreSQL version 8.3.18Upgrade to PostgreSQL version 9.1.3 | Feb 24, 2013 | Jul 18, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2012 |
| Suse | — | Upgrade postgresql10-plpythonUpgrade postgresql93-contribUpgrade postgresql96Upgrade postgresql93-serverUpgrade libecpg6Upgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql94Upgrade postgresql10Upgrade postgresql10-serverUpgrade libpq5Upgrade postgresql94-serverUpgrade postgresql96-serverUpgrade postgresql96-docsUpgrade postgresql96-develUpgrade postgresql10-plperlUpgrade postgresql94-contribUpgrade postgresql10-docsUpgrade postgresql93-develUpgrade postgresql93Upgrade libpq5-32bitUpgrade postgresql93-docsUpgrade postgresql94-docsUpgrade postgresql10-contribUpgrade postgresql96-contribUpgrade postgresql-contribUpgrade postgresql10-pltclUpgrade postgresql-develUpgrade postgresql10-develUpgrade postgresql94-devel | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade postgresql-8.3Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Jul 18, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub