PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a denial of service (server crash) by adding the (1) SECURITY DEFINER or (2) SET attributes to a procedural language's call handler.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Jul 5, 2012 |
| Centos_linux | — | Upgrade postgresql-docsUpgrade postgresql84Upgrade postgresql84-plperlUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresql84-plpythonUpgrade postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql84-libsUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql84-pltclUpgrade postgresqlUpgrade postgresql84-contribUpgrade postgresql-develUpgrade postgresql84-docsUpgrade postgresql84-serverUpgrade postgresql84-pythonUpgrade postgresql-contribUpgrade postgresql84-tclUpgrade postgresql84-develUpgrade postgresql84-test | Dec 1, 2016 | Jul 18, 2012 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Jul 18, 2012 |
| Oracle_linux | — | Upgrade postgresql-libsUpgrade postgresql84-plpythonUpgrade postgresql84-libsUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql84-plperlUpgrade postgresql-testUpgrade postgresql84Upgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql84-testUpgrade postgresql84-pltclUpgrade postgresql84-docsUpgrade postgresql-pltclUpgrade postgresql84-pythonUpgrade postgresql-plpythonUpgrade postgresql84-contribUpgrade postgresql-contribUpgrade postgresql84-develUpgrade postgresql84-tclUpgrade postgresql84-server | Oct 16, 2024 | Jul 18, 2012 |
| Postgres | — | Upgrade to PostgreSQL version 9.1.4Upgrade to PostgreSQL version 9.0.8Upgrade to PostgreSQL version 8.3.19Upgrade to PostgreSQL version 8.4.12 | Feb 24, 2013 | Jul 18, 2012 |
| Suse | — | Upgrade postgresql94-contribUpgrade postgresql96Upgrade postgresql94-docsUpgrade postgresql10-docsUpgrade postgresql94Upgrade postgresql10-serverUpgrade postgresql10Upgrade postgresql10-contribUpgrade postgresql96-develUpgrade libecpg6Upgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql94-serverUpgrade postgresql10-plpythonUpgrade postgresql93-docsUpgrade postgresql94-develUpgrade postgresql10-pltclUpgrade postgresql93-contribUpgrade postgresql10-plperlUpgrade postgresql96-contribUpgrade postgresql93Upgrade postgresql93-develUpgrade postgresql93-serverUpgrade postgresqlUpgrade postgresql10-develUpgrade libpq5-32bitUpgrade postgresql96-serverUpgrade postgresql-contribUpgrade libpq5Upgrade postgresql96-docs | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade postgresql-8.4Upgrade postgresql-8.3Upgrade postgresql-9.1 | Nov 8, 2024 | Jul 18, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub