PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-postgresqlalpine-linux-upgrade-postgresql14alpine-linux-upgrade-postgresql15 | Aug 30, 2017 | May 12, 2017 | |
| Amazon_linux | — | amazon-linux-upgrade--postgresql94amazon-linux-upgrade--postgresql95amazon-linux-upgrade-postgresql92amazon-linux-upgrade-postgresql93 | Jun 7, 2017 | May 12, 2017 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | May 12, 2017 | |
| Centos_linux | — | centos-upgrade-postgresqlcentos-upgrade-postgresql-contribcentos-upgrade-postgresql-debuginfocentos-upgrade-postgresql-develcentos-upgrade-postgresql-docscentos-upgrade-postgresql-libscentos-upgrade-postgresql-plperlcentos-upgrade-postgresql-plpythoncentos-upgrade-postgresql-pltclcentos-upgrade-postgresql-servercentos-upgrade-postgresql-staticcentos-upgrade-postgresql-testcentos-upgrade-postgresql-upgrade | Aug 28, 2019 | May 12, 2017 |
| Debian | debian-upgrade-postgresql-9-1debian-upgrade-postgresql-9-6 | May 14, 2017 | May 12, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-db-postgresql | Oct 30, 2017 | May 12, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-postgresqlhuawei-euleros-2_0_sp1-upgrade-postgresql-contribhuawei-euleros-2_0_sp1-upgrade-postgresql-develhuawei-euleros-2_0_sp1-upgrade-postgresql-docshuawei-euleros-2_0_sp1-upgrade-postgresql-libshuawei-euleros-2_0_sp1-upgrade-postgresql-plperlhuawei-euleros-2_0_sp1-upgrade-postgresql-plpythonhuawei-euleros-2_0_sp1-upgrade-postgresql-pltclhuawei-euleros-2_0_sp1-upgrade-postgresql-serverhuawei-euleros-2_0_sp1-upgrade-postgresql-test | Jan 18, 2018 | May 12, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-postgresqlhuawei-euleros-2_0_sp2-upgrade-postgresql-contribhuawei-euleros-2_0_sp2-upgrade-postgresql-develhuawei-euleros-2_0_sp2-upgrade-postgresql-docshuawei-euleros-2_0_sp2-upgrade-postgresql-libshuawei-euleros-2_0_sp2-upgrade-postgresql-plperlhuawei-euleros-2_0_sp2-upgrade-postgresql-plpythonhuawei-euleros-2_0_sp2-upgrade-postgresql-pltclhuawei-euleros-2_0_sp2-upgrade-postgresql-serverhuawei-euleros-2_0_sp2-upgrade-postgresql-test | Jan 18, 2018 | May 12, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-postgresqloracle-linux-upgrade-postgresql-contriboracle-linux-upgrade-postgresql-develoracle-linux-upgrade-postgresql-docsoracle-linux-upgrade-postgresql-libsoracle-linux-upgrade-postgresql-plperloracle-linux-upgrade-postgresql-plpythonoracle-linux-upgrade-postgresql-pltcloracle-linux-upgrade-postgresql-serveroracle-linux-upgrade-postgresql-staticoracle-linux-upgrade-postgresql-testoracle-linux-upgrade-postgresql-upgrade | Aug 8, 2017 | May 11, 2017 |
| Postgres | postgres-upgrade-9_2_21postgres-upgrade-9_3_17postgres-upgrade-9_4_12postgres-upgrade-9_5_7postgres-upgrade-9_6_3 | May 15, 2017 | May 12, 2017 | |
| Redhat_linux | — | redhat-upgrade-postgresqlredhat-upgrade-postgresql-contribredhat-upgrade-postgresql-debuginforedhat-upgrade-postgresql-develredhat-upgrade-postgresql-docsredhat-upgrade-postgresql-libsredhat-upgrade-postgresql-plperlredhat-upgrade-postgresql-plpythonredhat-upgrade-postgresql-pltclredhat-upgrade-postgresql-serverredhat-upgrade-postgresql-staticredhat-upgrade-postgresql-testredhat-upgrade-postgresql-upgrade | Aug 6, 2017 | May 12, 2017 |
| Suse | — | suse-upgrade-libecpg6suse-upgrade-libpq5suse-upgrade-libpq5-32bitsuse-upgrade-postgresql10suse-upgrade-postgresql10-contribsuse-upgrade-postgresql10-develsuse-upgrade-postgresql10-docssuse-upgrade-postgresql10-plperlsuse-upgrade-postgresql10-plpythonsuse-upgrade-postgresql10-pltclsuse-upgrade-postgresql10-serversuse-upgrade-postgresql93suse-upgrade-postgresql93-contribsuse-upgrade-postgresql93-docssuse-upgrade-postgresql93-serversuse-upgrade-postgresql94suse-upgrade-postgresql94-contribsuse-upgrade-postgresql94-develsuse-upgrade-postgresql94-docssuse-upgrade-postgresql94-serversuse-upgrade-postgresql96suse-upgrade-postgresql96-contribsuse-upgrade-postgresql96-develsuse-upgrade-postgresql96-docssuse-upgrade-postgresql96-server | May 31, 2017 | May 12, 2017 |
| Ubuntu | ubuntu-upgrade-postgresql-9-3ubuntu-upgrade-postgresql-9-5ubuntu-upgrade-postgresql-9-6 | Nov 19, 2024 | May 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub