Race condition in the (1) CREATE INDEX and (2) unspecified ALTER TABLE commands in PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 allows remote authenticated users to create an unauthorized index or read portions of unauthorized tables by creating or deleting a table with the same name during the timing window.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql | Sep 20, 2017 | Mar 31, 2014 |
| Centos_linux | — | Upgrade postgresql-tclUpgrade postgresql84-serverUpgrade postgresql-develUpgrade postgresql84Upgrade postgresql84-develUpgrade postgresql84-pltclUpgrade postgresql-docsUpgrade postgresql-plUpgrade postgresql84-docsUpgrade postgresql-contribUpgrade postgresql84-testUpgrade postgresql-pythonUpgrade postgresql84-tclUpgrade postgresql84-pythonUpgrade postgresql-plperlUpgrade postgresql-libsUpgrade postgresql84-libsUpgrade postgresql84-plpythonUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-serverUpgrade postgresql84-contribUpgrade postgresql84-plperlUpgrade postgresqlUpgrade postgresql-plpython | Dec 1, 2016 | Mar 31, 2014 |
| Freebsd | — | Upgrade postgresql-server | Dec 10, 2025 | Feb 20, 2014 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server. | Oct 30, 2017 | Mar 31, 2014 |
| Oracle_linux | — | Upgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql84-develUpgrade postgresql-develUpgrade postgresql84-tclUpgrade postgresql84Upgrade postgresql-pltclUpgrade postgresql84-contribUpgrade postgresql84-plperlUpgrade postgresql84-testUpgrade postgresql-plpythonUpgrade postgresql84-plpythonUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql84-pythonUpgrade postgresql84-pltclUpgrade postgresql84-docsUpgrade postgresql84-libsUpgrade postgresql84-server | Oct 16, 2024 | Mar 28, 2014 |
| Postgres | — | Upgrade to PostgreSQL version 9.3.3 | Apr 1, 2014 | Mar 31, 2014 |
| Suse | — | Upgrade postgresql93-develUpgrade postgresql10-plperlUpgrade postgresql91-develUpgrade postgresql10-develUpgrade postgresql94-docsUpgrade postgresql10Upgrade postgresql93-contribUpgrade libpq5-32bitUpgrade postgresql93Upgrade postgresql93-docsUpgrade postgresql91-contribUpgrade libpq5Upgrade postgresql96-serverUpgrade postgresql94-contribUpgrade postgresql10-serverUpgrade postgresql96-develUpgrade postgresql10-contribUpgrade postgresql91-serverUpgrade postgresql10-plpythonUpgrade postgresql94Upgrade postgresql93-serverUpgrade postgresql91-docsUpgrade postgresql94-develUpgrade postgresql96-docsUpgrade postgresql91Upgrade libecpg6Upgrade postgresql96-contribUpgrade postgresql96Upgrade postgresql10-docsUpgrade postgresql94-serverUpgrade postgresql10-pltcl | Dec 18, 2015 | Mar 28, 2014 |
| Ubuntu | — | Upgrade postgresql-9.1Upgrade postgresql-8.4 | Nov 8, 2024 | Mar 31, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub