PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficiently random numbers, which might allow remote authenticated users to have an unspecified impact via vectors related to the "contrib/pgcrypto functions."
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Apr 4, 2013 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Aug 28, 2015 | Apr 4, 2013 |
| Apple Osx Postgresql | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Sep 17, 2013 | Apr 4, 2013 |
| Centos_linux | — | Upgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql84-testUpgrade postgresql84-contribUpgrade postgresql84-develUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql84Upgrade postgresql84-plpythonUpgrade postgresql84-docsUpgrade postgresql-testUpgrade postgresql84-serverUpgrade postgresql84-tclUpgrade postgresql84-pltclUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql84-pythonUpgrade postgresql84-libsUpgrade postgresql-plpythonUpgrade postgresql84-plperl | Dec 1, 2016 | Apr 4, 2013 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Apr 4, 2013 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Apr 4, 2013 |
| Oracle_linux | — | Upgrade postgresql84-serverUpgrade postgresql84-pythonUpgrade postgresql-contribUpgrade postgresql84-develUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql84-libsUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql84-pltclUpgrade postgresql-docsUpgrade postgresql84-testUpgrade postgresql84-plperlUpgrade postgresql84-plpythonUpgrade postgresql84-tclUpgrade postgresql-develUpgrade postgresql84Upgrade postgresql-testUpgrade postgresql84-docsUpgrade postgresql84-contrib | Oct 16, 2024 | Apr 4, 2013 |
| Postgres | — | Upgrade to PostgreSQL version 9.1.9Upgrade to PostgreSQL version 9.2.4Upgrade to PostgreSQL version 8.4.17Upgrade to PostgreSQL version 9.0.13 | Apr 5, 2013 | Apr 4, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 4, 2013 |
| Suse | — | Upgrade postgresql92-plperlUpgrade libpq5-x86Upgrade sle-sdk-releaseUpgrade libecpg6-debuginfo-32bitUpgrade postgresql91-devel-debuginfo-x86Upgrade postgresql91-contrib-debuginfoUpgrade libpq5-debuginfo-32bitUpgrade libpq5-32bitUpgrade postgresql91-contribUpgrade postgresql91-devel-debuginfoUpgrade postgresql91-debuginfoUpgrade postgresql91-develUpgrade postgresql92-develUpgrade postgresql91-libsUpgrade libecpg6-32bitUpgrade postgresql91-plperl-debuginfoUpgrade postgresql92-docsUpgrade libpq5Upgrade libpq5-debuginfo-x86Upgrade libecpg6Upgrade postgresql92-pltclUpgrade postgresql91-server-debuginfoUpgrade postgresql92Upgrade libpq5-debuginfoUpgrade postgresql91Upgrade libecpg6-debuginfo-x86Upgrade libecpg6-debuginfoUpgrade postgresql91-plperlUpgrade postgresql91-libs-debugsourceUpgrade postgresql92-plpythonUpgrade postgresql91-debugsourceUpgrade postgresql91-serverUpgrade postgresql91-plpythonUpgrade postgresql92-serverUpgrade postgresql91-pltclUpgrade postgresql91-pltcl-debuginfoUpgrade postgresql91-devel-32bitUpgrade postgresql91-devel-debuginfo-32bitUpgrade postgresql92-contribUpgrade postgresql91-docsUpgrade libecpg6-x86Upgrade postgresql91-plpython-debuginfoUpgrade postgresql92-libs | Feb 17, 2015 | Apr 4, 2013 |
| Ubuntu | — | Upgrade postgresql-8.3Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Apr 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub