PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Jul 5, 2012 |
| Centos_linux | — | Upgrade postgresql84-docsUpgrade postgresql84-tclUpgrade postgresql84-pythonUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql84-develUpgrade postgresql84-testUpgrade postgresql84-serverUpgrade postgresql-plperlUpgrade postgresql84-libsUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresql84-pltclUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql84Upgrade postgresql84-plpythonUpgrade postgresql84-plperlUpgrade postgresql84-contrib | Dec 1, 2016 | Jul 18, 2012 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Jul 18, 2012 |
| Oracle_linux | — | Upgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql84-libsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql84-plpythonUpgrade postgresql84Upgrade postgresql-docsUpgrade postgresql84-plperlUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql84-pltclUpgrade postgresql-develUpgrade postgresql84-contribUpgrade postgresql84-serverUpgrade postgresql84-tclUpgrade postgresql84-develUpgrade postgresql84-pythonUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql84-docsUpgrade postgresql84-test | Oct 16, 2024 | Jul 18, 2012 |
| Postgres | — | Upgrade to PostgreSQL version 8.3.19Upgrade to PostgreSQL version 9.0.8Upgrade to PostgreSQL version 9.1.4Upgrade to PostgreSQL version 8.4.12 | Feb 24, 2013 | Jul 18, 2012 |
| Suse | — | Upgrade postgresql96-develUpgrade postgresql94-docsUpgrade postgresql10Upgrade postgresql94Upgrade libecpg6Upgrade postgresql10-serverUpgrade postgresql10-contribUpgrade postgresql96Upgrade postgresql10-docsUpgrade postgresql94-contribUpgrade libpq5Upgrade postgresql93-contribUpgrade libpq5-32bitUpgrade postgresql10-plperlUpgrade postgresql10-pltclUpgrade postgresql10-plpythonUpgrade postgresql-develUpgrade postgresql96-serverUpgrade postgresql-docsUpgrade postgresql93-docsUpgrade postgresql10-develUpgrade postgresql93-serverUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql94-develUpgrade postgresql94-serverUpgrade postgresql-contribUpgrade postgresql93Upgrade postgresql93-develUpgrade postgresql96-docsUpgrade postgresql96-contrib | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade postgresql-8.4Upgrade postgresql-8.3Upgrade postgresql-9.1 | Nov 8, 2024 | Jul 18, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub