PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Aug 30, 2017 | Apr 4, 2013 |
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2013-004 | Aug 28, 2015 | Apr 4, 2013 |
| Apple Osx Postgresql | — | Apply OS X security update 2013-004Upgrade macOS to the latest version | Sep 17, 2013 | Apr 4, 2013 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Apr 4, 2013 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Apr 4, 2013 |
| Postgres | — | Upgrade to PostgreSQL version 9.2.4Upgrade to PostgreSQL version 9.1.9 | Apr 5, 2013 | Apr 4, 2013 |
| Suse | — | Upgrade postgresql92-serverUpgrade postgresql92-develUpgrade libecpg6-32bitUpgrade postgresql91Upgrade libpq5-32bitUpgrade postgresql91-devel-32bitUpgrade postgresql91-develUpgrade libecpg6-x86Upgrade postgresql91-plpython-debuginfoUpgrade postgresql91-docsUpgrade postgresql91-serverUpgrade postgresql91-pltcl-debuginfoUpgrade postgresql92-contribUpgrade libecpg6Upgrade postgresql91-plpythonUpgrade sle-sdk-releaseUpgrade libecpg6-debuginfo-x86Upgrade postgresql92-libsUpgrade libpq5Upgrade postgresql91-devel-debuginfo-32bitUpgrade postgresql91-plperlUpgrade libpq5-x86Upgrade libpq5-debuginfoUpgrade libecpg6-debuginfo-32bitUpgrade libpq5-debuginfo-32bitUpgrade postgresql91-devel-debuginfoUpgrade postgresql91-server-debuginfoUpgrade postgresql91-debugsourceUpgrade postgresql92-docsUpgrade postgresql91-contribUpgrade postgresql91-devel-debuginfo-x86Upgrade postgresql91-libs-debugsourceUpgrade postgresql91-debuginfoUpgrade libpq5-debuginfo-x86Upgrade postgresql91-contrib-debuginfoUpgrade postgresql91-libsUpgrade libecpg6-debuginfoUpgrade postgresql91-plperl-debuginfoUpgrade postgresql91-pltclUpgrade postgresql92-plpythonUpgrade postgresql92-pltclUpgrade postgresql92-plperlUpgrade postgresql92 | Feb 17, 2015 | Apr 4, 2013 |
| Ubuntu | — | Upgrade postgresql-8.3Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Apr 4, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub