The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete fix for CVE-2007-3278.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade postgresqlUpgrade postgresql-server | Dec 10, 2025 | Apr 24, 2008 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Jan 9, 2008 |
| Oracle_linux | — | Upgrade postgresql-plUpgrade postgresql-develUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-tclUpgrade postgresql-python | Oct 16, 2024 | Jan 9, 2008 |
| Suse | — | Upgrade postgresql91Upgrade postgresqlUpgrade postgresql94-serverUpgrade libpq5Upgrade postgresql94-develUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql91-contribUpgrade postgresql-libs-x86Upgrade postgresql-serverUpgrade postgresql91-serverUpgrade postgresql-contribUpgrade postgresql94Upgrade libecpg6Upgrade postgresql94-docsUpgrade postgresql-develUpgrade postgresql94-contribUpgrade postgresql91-docsUpgrade postgresql-libs-32bitUpgrade libpq5-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade postgresql-8.1Upgrade postgresql-8.2Upgrade postgresql-pltcl-8.2Upgrade postgresql-pltcl-8.1 | Nov 8, 2024 | Jan 9, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub