PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle errors while reading a protocol message, which allows remote attackers to conduct SQL injection attacks via crafted binary data in a parameter and causing an error, which triggers the loss of synchronization and part of the protocol message to be treated as a new message, as demonstrated by causing a timeout or query cancellation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2015-006 | Aug 28, 2015 | Aug 28, 2015 |
| Apple Osx Postgresql | — | Apply OS X security update 2015-006Upgrade macOS to the latest version | Mar 29, 2016 | Mar 29, 2016 |
| Centos_linux | — | Upgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-docs | Aug 17, 2018 | Feb 11, 2015 |
| Freebsd | — | Upgrade postgresql90-serverUpgrade postgresql91-serverUpgrade postgresql93-serverUpgrade postgresql94-serverUpgrade postgresql92-server | Dec 10, 2025 | Feb 5, 2015 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Jul 18, 2015 |
| Oracle_linux | — | Upgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-upgradeUpgrade postgresql-pltcl | Oct 16, 2024 | Jan 27, 2020 |
| Postgres | — | Upgrade to PostgreSQL version 9.2.10Upgrade to PostgreSQL version 9.0.19Upgrade to PostgreSQL version 9.1.15Upgrade to PostgreSQL version 9.3.6Upgrade to PostgreSQL version 9.4.1 | Feb 17, 2015 | Feb 17, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 27, 2020 |
| Suse | — | Upgrade libpq5Upgrade postgresql93-develUpgrade postgresql93-contribUpgrade postgresql91Upgrade postgresql93-serverUpgrade postgresql93Upgrade postgresql91-contribUpgrade postgresql91-serverUpgrade libecpg6Upgrade postgresql91-develUpgrade postgresql91-docsUpgrade postgresql93-docsUpgrade libpq5-32bit | Dec 18, 2015 | Feb 11, 2015 |
| Ubuntu | — | Upgrade postgresql-9.1Upgrade postgresql-8.4Upgrade postgresql-9.3Upgrade postgresql-9.4 | Nov 8, 2024 | Jan 27, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub