Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.
CVSS Details
- CVSS 3.0 Base Score: 8.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresqlUpgrade postgresql15 | Nov 23, 2017 | Nov 22, 2017 |
| Amazon_linux | — | Upgrade postgresql93Upgrade postgresql95Upgrade postgresql92Upgrade postgresql94Upgrade postgresql96 | Dec 7, 2017 | Oct 10, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Nov 22, 2017 |
| Debian | — | Upgrade postgresql-9.6 | Nov 10, 2017 | Oct 10, 2017 |
| Freebsd | — | Upgrade postgresql94-serverUpgrade postgresql10-serverUpgrade postgresql93-serverUpgrade postgresql96-serverUpgrade postgresql92-serverUpgrade postgresql95-server | Nov 9, 2017 | Nov 9, 2017 |
| Postgres | — | Upgrade to PostgreSQL version 10.1 | Nov 10, 2017 | Nov 10, 2017 |
| Suse | — | Upgrade libecpg6Upgrade postgresql94Upgrade postgresql94-develUpgrade postgresql10-serverUpgrade postgresql94-contribUpgrade postgresql96-develUpgrade postgresql96-docsUpgrade postgresql94-docsUpgrade postgresql10-plpythonUpgrade postgresql10-contribUpgrade postgresql96Upgrade postgresql94-serverUpgrade postgresql10Upgrade postgresql10-docsUpgrade libpq5Upgrade postgresql10-pltclUpgrade libpq5-32bitUpgrade postgresql10-plperlUpgrade postgresql10-develUpgrade postgresql96-contribUpgrade postgresql96-server | Dec 21, 2017 | Oct 10, 2017 |
| Ubuntu | — | Upgrade postgresql-9.6Upgrade postgresql-9.5Upgrade postgresql-9.3 | Nov 14, 2017 | Oct 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub