The validator functions for the procedural languages (PLs) in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allow remote authenticated users to gain privileges via a function that is (1) defined in another language or (2) not allowed to be directly called by the user due to permissions.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Sep 20, 2017 | Mar 31, 2014 |
| Centos_linux | — | Upgrade postgresql84-plpythonUpgrade postgresql-tclUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql84Upgrade postgresql84-libsUpgrade postgresql84-plperlUpgrade postgresql84-tclUpgrade postgresql-pltclUpgrade postgresql84-docsUpgrade postgresql84-serverUpgrade postgresql84-contribUpgrade postgresql84-pythonUpgrade postgresql-pythonUpgrade postgresql84-pltclUpgrade postgresql84-testUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-plUpgrade postgresql-plpythonUpgrade postgresql84-devel | Dec 1, 2016 | Mar 31, 2014 |
| Debian | — | Upgrade postgresql-plshUpgrade postgresql-8.4Upgrade postgresql-9.1 | Jul 30, 2024 | Mar 31, 2014 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Feb 20, 2014 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Mar 31, 2014 |
| Oracle_linux | — | Upgrade postgresql84Upgrade postgresql84-plpythonUpgrade postgresql84-plperlUpgrade postgresql84-docsUpgrade postgresql-testUpgrade postgresql84-testUpgrade postgresqlUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql84-pythonUpgrade postgresql84-libsUpgrade postgresql84-serverUpgrade postgresql-plpythonUpgrade postgresql84-contribUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql84-pltclUpgrade postgresql84-tclUpgrade postgresql84-devel | Oct 16, 2024 | Mar 28, 2014 |
| Postgres | — | Upgrade to PostgreSQL version 9.3.3 | Apr 1, 2014 | Mar 31, 2014 |
| Suse | — | Upgrade postgresql10-plperlUpgrade postgresql10-plpythonUpgrade postgresql94-develUpgrade postgresql91-contribUpgrade postgresql93-serverUpgrade postgresql94-serverUpgrade postgresql96-docsUpgrade libpq5-32bitUpgrade postgresql91-develUpgrade postgresql93-docsUpgrade postgresql96-serverUpgrade postgresql96-contribUpgrade postgresql93-develUpgrade postgresql93Upgrade postgresql10-pltclUpgrade postgresql91Upgrade postgresql10-serverUpgrade postgresql10-docsUpgrade postgresql91-serverUpgrade postgresql96Upgrade libecpg6Upgrade postgresql10-contribUpgrade postgresql96-develUpgrade postgresql10-develUpgrade postgresql10Upgrade postgresql91-docsUpgrade postgresql94-docsUpgrade postgresql93-contribUpgrade postgresql94-contribUpgrade libpq5Upgrade postgresql94 | Dec 18, 2015 | Mar 28, 2014 |
| Ubuntu | — | Upgrade postgresql-8.4Upgrade postgresql-9.1 | Nov 8, 2024 | Mar 31, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub