CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check the execute permission for trigger functions marked SECURITY DEFINER, which allows remote authenticated users to execute otherwise restricted triggers on arbitrary data by installing the trigger on an attacker-owned table.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade postgresql-serverUpgrade postgresql84-libsUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql84-plpythonUpgrade postgresql84-plperlUpgrade postgresql-plpythonUpgrade postgresql84-contribUpgrade postgresql-develUpgrade postgresql-tclUpgrade postgresql84-testUpgrade postgresql84Upgrade postgresql84-serverUpgrade postgresql84-pythonUpgrade postgresql-docsUpgrade postgresql84-docsUpgrade postgresql-pythonUpgrade postgresql84-develUpgrade postgresql-plUpgrade postgresql-contribUpgrade postgresql84-pltclUpgrade postgresql84-tcl | Dec 1, 2016 | Jul 18, 2012 |
| Freebsd | — | Upgrade postgresql-client | Dec 10, 2025 | Feb 28, 2012 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Jul 18, 2012 |
| Oracle_linux | — | Upgrade postgresql84Upgrade postgresql84-pythonUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql84-docsUpgrade postgresql-plpythonUpgrade postgresql84-pltclUpgrade postgresql84-testUpgrade postgresql-pltclUpgrade postgresql84-tclUpgrade postgresql84-develUpgrade postgresql84-contribUpgrade postgresql84-serverUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql84-libsUpgrade postgresql-serverUpgrade postgresql-tclUpgrade postgresqlUpgrade postgresql84-plperlUpgrade postgresql-pythonUpgrade postgresql-testUpgrade postgresql84-plpythonUpgrade postgresql-pl | Oct 16, 2024 | Jul 18, 2012 |
| Postgres | — | Upgrade to PostgreSQL version 8.4.11Upgrade to PostgreSQL version 8.3.18Upgrade to PostgreSQL version 9.0.7Upgrade to PostgreSQL version 9.1.3 | Feb 24, 2013 | Jul 18, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2012 |
| Suse | — | Upgrade postgresql93-develUpgrade postgresql94-docsUpgrade postgresql94-develUpgrade postgresql10-pltclUpgrade postgresql96-develUpgrade postgresql-develUpgrade postgresql10-contribUpgrade postgresql10-develUpgrade postgresql93-docsUpgrade postgresql10-plperlUpgrade postgresql94-contribUpgrade postgresql93Upgrade postgresql-contribUpgrade postgresql96-docsUpgrade postgresql96-contribUpgrade libpq5-32bitUpgrade postgresql10-docsUpgrade postgresql-serverUpgrade postgresql94Upgrade postgresql96-serverUpgrade libecpg6Upgrade postgresql93-contribUpgrade postgresql94-serverUpgrade postgresql93-serverUpgrade postgresql-docsUpgrade postgresql96Upgrade postgresqlUpgrade postgresql10-plpythonUpgrade postgresql10Upgrade postgresql10-serverUpgrade libpq5 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade postgresql-8.4Upgrade postgresql-8.3Upgrade postgresql-9.1 | Nov 8, 2024 | Jul 18, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub