PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql15Upgrade postgresql14 | Aug 30, 2017 | May 12, 2017 |
| Amazon_linux | — | Upgrade postgresql92Upgrade postgresql95Upgrade postgresql93Upgrade postgresql94 | Jun 7, 2017 | May 12, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 12, 2017 |
| Centos_linux | — | Upgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-plpythonUpgrade postgresql-develUpgrade postgresql-debuginfoUpgrade postgresql-upgrade | Aug 28, 2019 | May 12, 2017 |
| Debian | — | Upgrade postgresql-9.6Upgrade postgresql-9.1 | May 14, 2017 | May 12, 2017 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | May 12, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-libs | Jan 18, 2018 | May 12, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresqlUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-pltcl | Jan 18, 2018 | May 12, 2017 |
| Oracle_linux | — | Upgrade postgresql-staticUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-upgradeUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-test | Aug 8, 2017 | May 11, 2017 |
| Postgres | — | Upgrade to PostgreSQL version 9.2.21Upgrade to PostgreSQL version 9.6.3Upgrade to PostgreSQL version 9.3.17Upgrade to PostgreSQL version 9.4.12Upgrade to PostgreSQL version 9.5.7 | May 15, 2017 | May 12, 2017 |
| Redhat_linux | — | Upgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-upgradeNo solution existsUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql | Aug 6, 2017 | May 12, 2017 |
| Suse | — | Upgrade postgresql93-serverUpgrade postgresql94-serverUpgrade postgresql10-serverUpgrade postgresql93-contribUpgrade postgresql93Upgrade postgresql10-contribUpgrade postgresql10-plpythonUpgrade postgresql10Upgrade libpq5Upgrade postgresql94-develUpgrade postgresql96-contribUpgrade postgresql94-contribUpgrade postgresql94-docsUpgrade postgresql96Upgrade postgresql10-plperlUpgrade postgresql96-develUpgrade postgresql96-serverUpgrade postgresql10-docsUpgrade postgresql10-pltclUpgrade postgresql93-docsUpgrade postgresql94Upgrade postgresql96-docsUpgrade libecpg6Upgrade postgresql10-develUpgrade libpq5-32bit | May 31, 2017 | May 12, 2017 |
| Ubuntu | — | Upgrade postgresql-9.5Upgrade postgresql-9.6Upgrade postgresql-9.3 | Nov 19, 2024 | May 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub