Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remote authenticated users to modify configuration settings and execute arbitrary code, via a connection request using a database name that begins with a "-" (hyphen).
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Apr 4, 2013 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Aug 28, 2015 | Apr 4, 2013 |
| Apple Osx Postgresql | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Sep 17, 2013 | Apr 4, 2013 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Apr 4, 2013 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Apr 4, 2013 |
| Postgres | — | Upgrade to PostgreSQL version 9.2.4Upgrade to PostgreSQL version 9.1.9Upgrade to PostgreSQL version 9.0.13 | Apr 5, 2013 | Apr 4, 2013 |
| Suse | — | Upgrade postgresql91-devel-32bitUpgrade postgresql91-plperlUpgrade postgresql91Upgrade postgresql92-pltclUpgrade libpq5-32bitUpgrade postgresql91-docsUpgrade sle-sdk-releaseUpgrade libpq5-x86Upgrade postgresql91-plpython-debuginfoUpgrade postgresql91-plpythonUpgrade postgresql91-debugsourceUpgrade postgresql91-libs-debugsourceUpgrade postgresql91-debuginfoUpgrade libpq5-debuginfoUpgrade postgresql91-serverUpgrade postgresql91-devel-debuginfo-32bitUpgrade libecpg6-debuginfo-x86Upgrade postgresql91-devel-debuginfo-x86Upgrade postgresql91-pltclUpgrade postgresql91-server-debuginfoUpgrade postgresql91-contribUpgrade postgresql92-libsUpgrade postgresql92-serverUpgrade postgresql91-libsUpgrade libecpg6-32bitUpgrade postgresql92-develUpgrade libecpg6-x86Upgrade postgresql92-plperlUpgrade postgresql91-contrib-debuginfoUpgrade libpq5-debuginfo-x86Upgrade postgresql91-devel-debuginfoUpgrade libecpg6-debuginfo-32bitUpgrade postgresql91-develUpgrade postgresql92Upgrade libpq5Upgrade postgresql92-docsUpgrade postgresql92-plpythonUpgrade libpq5-debuginfo-32bitUpgrade postgresql91-pltcl-debuginfoUpgrade postgresql92-contribUpgrade postgresql91-plperl-debuginfoUpgrade libecpg6Upgrade libecpg6-debuginfo | Feb 17, 2015 | Apr 4, 2013 |
| Ubuntu | — | Upgrade postgresql-8.3Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Apr 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub