PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql14Upgrade postgresql15 | Sep 20, 2017 | Aug 16, 2017 |
| Amazon_linux | — | Upgrade postgresql93Upgrade postgresql95Upgrade postgresql94Upgrade postgresql96Upgrade postgresql92 | Sep 1, 2017 | Aug 10, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 16, 2017 |
| Centos_linux | — | Upgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresqlUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-plperl | Sep 15, 2017 | Aug 10, 2017 |
| Debian | — | Upgrade postgresql-9.1Upgrade postgresql-9.6 | Aug 12, 2017 | Aug 10, 2017 |
| Freebsd | — | Upgrade postgresql94-serverUpgrade postgresql93-serverUpgrade postgresql96-serverUpgrade postgresql92-serverUpgrade postgresql95-server | Aug 10, 2017 | Aug 10, 2017 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Aug 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresql-testUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-devel | Jan 18, 2018 | Aug 16, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-docs | Jan 18, 2018 | Aug 16, 2017 |
| Oracle_linux | — | Upgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-libsUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-upgrade | Sep 15, 2017 | Aug 10, 2017 |
| Postgres | — | Upgrade to PostgreSQL version 9.6.4 | Aug 17, 2017 | Aug 16, 2017 |
| Redhat_linux | — | Upgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-debuginfoNo solution existsUpgrade postgresql-staticUpgrade postgresql-upgrade | Oct 4, 2017 | Aug 10, 2017 |
| Suse | — | Upgrade postgresql96-develUpgrade postgresql94-docsUpgrade postgresql94-develUpgrade postgresql93-docsUpgrade postgresql96-contribUpgrade postgresql10-pltclUpgrade libpq5-32bitUpgrade postgresql94-contribUpgrade postgresql10-docsUpgrade postgresql10-develUpgrade postgresql96-docsUpgrade postgresql10-plperlUpgrade postgresql96Upgrade postgresql10-serverUpgrade postgresql10-contribUpgrade postgresql93-contribUpgrade postgresql96-serverUpgrade postgresql94Upgrade postgresql93Upgrade libecpg6Upgrade postgresql94-serverUpgrade postgresql93-serverUpgrade postgresql10Upgrade postgresql10-plpythonUpgrade libpq5 | Aug 23, 2017 | Aug 10, 2017 |
| Ubuntu | — | Upgrade postgresql-9.6Upgrade postgresql-9.5Upgrade postgresql-9.3 | Aug 15, 2017 | Aug 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub