The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Feb 5, 2007 |
| Oracle_linux | — | Upgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-tclUpgrade postgresql-pythonUpgrade postgresql-plUpgrade postgresql-docsUpgrade postgresql-devel | Oct 16, 2024 | Feb 6, 2007 |
| Suse | — | Upgrade postgresql-plUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-libs-64bitUpgrade postgresql-libs-32bitUpgrade suse-releaseUpgrade postgresql-libs-x86 | Feb 17, 2015 | Feb 5, 2007 |
| Ubuntu | — | Upgrade postgresql-7.4Upgrade postgresql-8.1Upgrade postgresql-8.0 | Nov 8, 2024 | Feb 6, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub