The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using mismatched encoding conversion requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade postgresql-docsUpgrade postgresql-jdbcUpgrade postgresql-tclUpgrade postgresql-debuginfoUpgrade postgresql-pythonUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-plUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-devel | Dec 1, 2016 | Mar 17, 2009 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server.Upgrade dev-db/postgresql.Upgrade dev-db/postgresql-base. | Oct 30, 2017 | Mar 17, 2009 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-plUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-pythonUpgrade postgresql-tcl | Oct 16, 2024 | Mar 17, 2009 |
| Postgres | — | Upgrade to PostgreSQL version 8.1.17Upgrade to PostgreSQL version 8.0.21Upgrade to PostgreSQL version 8.3.7Upgrade to PostgreSQL version 8.2.13Upgrade to PostgreSQL version 7.4.25 | Feb 24, 2013 | Mar 17, 2009 |
| Suse | — | Upgrade postgresql-libs-32bitUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-libs-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade postgresql-8.1Upgrade postgresql-8.3 | Nov 8, 2024 | Mar 17, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub