PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
CVSS Details
- CVSS 3.0 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql15Upgrade postgresql | Sep 20, 2017 | Aug 16, 2017 |
| Amazon_linux | — | Upgrade postgresql93Upgrade postgresql95Upgrade postgresql92Upgrade postgresql96Upgrade postgresql94 | Sep 1, 2017 | Aug 10, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 16, 2017 |
| Centos_linux | — | Upgrade postgresql-libsUpgrade postgresql-upgradeUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-plpythonUpgrade postgresql-debuginfo | Sep 15, 2017 | Aug 10, 2017 |
| Debian | — | Upgrade postgresql-9.1Upgrade postgresql-9.6 | Aug 12, 2017 | Aug 10, 2017 |
| Freebsd | — | Upgrade postgresql96-serverUpgrade postgresql94-serverUpgrade postgresql93-serverUpgrade postgresql95-serverUpgrade postgresql92-server | Aug 10, 2017 | Aug 10, 2017 |
| Gentoo Linux | — | Upgrade dev-db/postgresql. | Oct 30, 2017 | Aug 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-libsUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-develUpgrade postgresql-pltcl | Jan 18, 2018 | Aug 16, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-libsUpgrade postgresql-plperlUpgrade postgresql-docsUpgrade postgresqlUpgrade postgresql-test | Jan 18, 2018 | Aug 16, 2017 |
| Oracle_linux | — | Upgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-develUpgrade postgresql-contribUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql-pltcl | Sep 15, 2017 | Aug 10, 2017 |
| Postgres | — | Upgrade to PostgreSQL version 9.6.4 | Aug 17, 2017 | Aug 16, 2017 |
| Redhat_linux | — | Upgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-serverUpgrade postgresql-testUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-staticNo solution existsUpgrade postgresql-debuginfoUpgrade postgresql-upgrade | Oct 4, 2017 | Aug 10, 2017 |
| Suse | — | Upgrade postgresql10-docsUpgrade postgresql10-pltclUpgrade postgresql94-contribUpgrade postgresql10-develUpgrade postgresql96-docsUpgrade postgresql94-docsUpgrade libpq5-32bitUpgrade postgresql96-contribUpgrade postgresql93-docsUpgrade postgresql96-develUpgrade postgresql10-plperlUpgrade postgresql94-develUpgrade postgresql10-plpythonUpgrade postgresql93-contribUpgrade postgresql93Upgrade postgresql96-serverUpgrade libecpg6Upgrade libpq5Upgrade postgresql10-serverUpgrade postgresql10Upgrade postgresql94-serverUpgrade postgresql93-serverUpgrade postgresql10-contribUpgrade postgresql96Upgrade postgresql94 | Aug 23, 2017 | Aug 10, 2017 |
| Ubuntu | — | Upgrade postgresql-9.3Upgrade postgresql-9.6Upgrade postgresql-9.5 | Aug 15, 2017 | Aug 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub