PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Apr 4, 2013 |
| Apple Osx Apache | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Aug 28, 2015 | Apr 4, 2013 |
| Apple Osx Postgresql | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Sep 17, 2013 | Apr 4, 2013 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Apr 4, 2013 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Apr 4, 2013 |
| Postgres | — | Upgrade to PostgreSQL version 9.2.4Upgrade to PostgreSQL version 9.1.9 | Apr 5, 2013 | Apr 4, 2013 |
| Suse | — | Upgrade postgresql92-develUpgrade postgresql91Upgrade sle-sdk-releaseUpgrade postgresql91-plpythonUpgrade libecpg6-x86Upgrade postgresql92-libsUpgrade postgresql91-devel-32bitUpgrade libpq5Upgrade postgresql92-contribUpgrade postgresql91-plperlUpgrade libecpg6Upgrade postgresql91-pltcl-debuginfoUpgrade postgresql92-serverUpgrade postgresql91-docsUpgrade libecpg6-debuginfo-x86Upgrade postgresql91-devel-debuginfo-32bitUpgrade postgresql91-develUpgrade postgresql91-plpython-debuginfoUpgrade libpq5-32bitUpgrade postgresql91-serverUpgrade libecpg6-32bitUpgrade libecpg6-debuginfoUpgrade postgresql91-debugsourceUpgrade postgresql91-libsUpgrade postgresql91-server-debuginfoUpgrade postgresql91-contribUpgrade postgresql91-debuginfoUpgrade postgresql92-docsUpgrade libecpg6-debuginfo-32bitUpgrade postgresql92-pltclUpgrade postgresql91-devel-debuginfoUpgrade postgresql91-libs-debugsourceUpgrade libpq5-debuginfoUpgrade postgresql91-devel-debuginfo-x86Upgrade postgresql92-plpythonUpgrade postgresql91-pltclUpgrade postgresql91-contrib-debuginfoUpgrade libpq5-debuginfo-32bitUpgrade libpq5-debuginfo-x86Upgrade postgresql92Upgrade postgresql91-plperl-debuginfoUpgrade postgresql92-plperlUpgrade libpq5-x86 | Feb 17, 2015 | Apr 4, 2013 |
| Ubuntu | — | Upgrade postgresql-8.3Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Apr 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub