PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade postgresql-serverUpgrade postgresqlUpgrade ja-postgresql | Dec 10, 2025 | Aug 13, 2006 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | May 24, 2006 |
| Suse | — | Upgrade postgresqlUpgrade postgresql-libs-32bitUpgrade postgresql-libs-64bitUpgrade postgresql-docsUpgrade postgresql-libs-x86Upgrade postgresql-serverUpgrade postgresql-plUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-libs | Feb 17, 2015 | May 24, 2006 |
| Ubuntu | — | Upgrade postgresql-8.1Upgrade libpq4Upgrade postgresql-client-8.1Upgrade postgresql-contrib-8.1Upgrade libpq-dev | Nov 8, 2024 | May 24, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub