A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database. Versions 9.3 through 10 are affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresqlUpgrade postgresql15 | Aug 22, 2024 | Mar 2, 2018 |
| Amazon_linux | — | Upgrade postgresql96Upgrade postgresql94Upgrade postgresql95Upgrade postgresql93 | Apr 6, 2018 | Mar 1, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 2, 2018 |
| Freebsd | — | Upgrade postgresql96-serverUpgrade postgresql95-serverUpgrade postgresql10-serverUpgrade postgresql94-serverUpgrade postgresql93-server | Mar 2, 2018 | Mar 1, 2018 |
| Postgres | — | Upgrade to PostgreSQL version 10.3 | Mar 2, 2018 | Mar 2, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 2, 2018 |
| Suse | — | Upgrade postgresql10-docsUpgrade postgresql96-docsUpgrade postgresql96-contribUpgrade postgresql96-serverUpgrade postgresql10-pltclUpgrade postgresql94Upgrade postgresql94-contribUpgrade postgresql94-docsUpgrade libpq5-32bitUpgrade postgresql94-develUpgrade postgresql10-develUpgrade postgresql96-develUpgrade postgresql10-plpythonUpgrade libecpg6Upgrade postgresql96Upgrade postgresql10-plperlUpgrade postgresql10-contribUpgrade postgresql10Upgrade postgresql10-serverUpgrade postgresql94-serverUpgrade libpq5 | Mar 20, 2018 | Mar 1, 2018 |
| Ubuntu | — | Upgrade postgresql-9.3Upgrade postgresql-9.5Upgrade postgresql-9.6 | Apr 25, 2018 | Mar 1, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub