The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Feb 12, 2013 |
| Centos_linux | — | Upgrade postgresql-contribUpgrade postgresql84-libsUpgrade postgresql-plperlUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql84-tclUpgrade postgresql84-pythonUpgrade postgresql84-pltclUpgrade postgresql84-serverUpgrade postgresql-plpythonUpgrade postgresql84-develUpgrade postgresql84-contribUpgrade postgresql84-plpythonUpgrade postgresqlUpgrade postgresql84-plperlUpgrade postgresql84-testUpgrade postgresql-testUpgrade postgresql84-docsUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql84Upgrade postgresql-docs | Dec 1, 2016 | Feb 12, 2013 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Feb 12, 2013 |
| Oracle_linux | — | Upgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql84-serverUpgrade postgresql84-docsUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql84-pythonUpgrade postgresql84-libsUpgrade postgresql84-plpythonUpgrade postgresql-serverUpgrade postgresql84Upgrade postgresqlUpgrade postgresql84-pltclUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql84-tclUpgrade postgresql84-plperlUpgrade postgresql84-contribUpgrade postgresql84-develUpgrade postgresql84-testUpgrade postgresql-test | Oct 16, 2024 | Feb 13, 2013 |
| Postgres | — | Upgrade to PostgreSQL version 9.2.3Upgrade to PostgreSQL version 9.0.12Upgrade to PostgreSQL version 8.4.16Upgrade to PostgreSQL version 9.1.8Upgrade to PostgreSQL version 8.3.23 | Feb 24, 2013 | Feb 12, 2013 |
| Suse | — | Upgrade postgresql-serverUpgrade postgresqlUpgrade postgresql91-plperlUpgrade libecpg6Upgrade postgresql91-devel-32bitUpgrade postgresql91-docsUpgrade libecpg6-debuginfoUpgrade libpq5Upgrade postgresql91-devel-debuginfo-32bitUpgrade postgresql91-debugsourceUpgrade libpq5-debuginfoUpgrade libecpg6-debuginfo-32bitUpgrade postgresql91-devel-debuginfo-x86Upgrade libecpg6-32bitUpgrade libpq5-debuginfo-x86Upgrade postgresql91-pltcl-debuginfoUpgrade postgresql91-plpython-debuginfoUpgrade postgresql91-plperl-debuginfoUpgrade libecpg6-debuginfo-x86Upgrade postgresql91-develUpgrade postgresql91-contrib-debuginfoUpgrade postgresql91-devel-debuginfoUpgrade libpq5-32bitUpgrade libpq5-debuginfo-32bitUpgrade postgresql91-server-debuginfoUpgrade postgresql-docsUpgrade postgresql91-plpythonUpgrade postgresql91Upgrade postgresql91-serverUpgrade libpq5-x86Upgrade libecpg6-x86Upgrade postgresql91-debuginfoUpgrade postgresql-contribUpgrade sle-sdk-releaseUpgrade postgresql91-pltclUpgrade postgresql91-libs-debugsourceUpgrade postgresql91-libsUpgrade postgresql91-contrib | Dec 12, 2013 | Feb 12, 2013 |
| Ubuntu | — | Upgrade postgresql-8.3Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Feb 13, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub