A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-pltclUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-contrib | May 4, 2022 | Oct 29, 2019 |
| Alpine Linux | — | Upgrade postgresqlUpgrade postgresql15Upgrade postgresql14 | Nov 8, 2019 | Oct 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-develUpgrade postgresql-plperlUpgrade postgresql-plpythonUpgrade postgresql-debuginfoUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-upgrade | Jun 24, 2021 | Oct 29, 2019 |
| Amazon_linux | — | Upgrade postgresql92Upgrade postgresql94Upgrade postgresql96Upgrade postgresql95 | Oct 28, 2020 | Aug 8, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 29, 2019 |
| Centos_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-develUpgrade postgresql-upgrade-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contribUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-contrib-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-plpythonUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-pltclUpgrade postgresql-testUpgrade postgresql-docs-debuginfoUpgrade postgresql-libsUpgrade postgresql-server-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresqlUpgrade postgresql-plperlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docsUpgrade postgresql-debugsourceUpgrade postgresql-static | Sep 9, 2020 | Oct 29, 2019 |
| Debian | — | Upgrade postgresql-11 | Aug 13, 2019 | Aug 13, 2019 |
| Freebsd | — | Upgrade postgresql95-serverUpgrade postgresql94-serverUpgrade postgresql10-serverUpgrade postgresql11-serverUpgrade postgresql96-server | Aug 9, 2019 | Aug 8, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-testUpgrade postgresqlUpgrade postgresql-libsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-contribUpgrade postgresql-pltclUpgrade postgresql-docsUpgrade postgresql-develUpgrade postgresql-plpython | Sep 30, 2019 | Aug 8, 2019 |
| Oracle_linux | — | Upgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade rh-postgresql10-postgresqlUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-develUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-contribUpgrade rh-postgresql10-postgresql-pltclUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-plperlUpgrade rh-postgresql10-postgresql-serverUpgrade postgresqlUpgrade rh-postgresql10-postgresql-syspathsUpgrade postgresql-staticUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-docsUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-develUpgrade postgresql-pltclUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresql-serverUpgrade postgresql-contribUpgrade rh-postgresql10-postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-libsUpgrade postgresql-testUpgrade postgresql-plperlUpgrade postgresql-plpython | Sep 10, 2020 | Aug 8, 2019 |
| Postgres | — | Upgrade to PostgreSQL version 11.5 | Aug 9, 2019 | Aug 9, 2019 |
| Redhat_linux | — | Upgrade postgresql-docsUpgrade postgresql-debugsourceUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-serverUpgrade postgresql-staticUpgrade postgresql-testUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plperlUpgrade postgresql-debuginfoUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpythonUpgrade postgresql-upgradeUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-develUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-server-develUpgrade postgresql-libsUpgrade postgresql-contribUpgrade postgresql-upgrade-devel-debuginfoNo solution exists | Sep 9, 2020 | Oct 29, 2019 |
| Suse | — | Upgrade postgresql10-plperlUpgrade postgresql12-testUpgrade postgresql-develUpgrade postgresql94-pltclUpgrade libecpg6-32bitUpgrade postgresql96-testUpgrade postgresql96-plpythonUpgrade postgresql12-pltclUpgrade postgresql-testUpgrade postgresql96-serverUpgrade postgresql10-serverUpgrade postgresqlUpgrade libpq5Upgrade postgresql-serverUpgrade postgresql96-plperlUpgrade postgresql12-server-develUpgrade postgresql12-docsUpgrade postgresql94-docsUpgrade libpq5-32bitUpgrade postgresql94-contribUpgrade postgresql12-contribUpgrade postgresql10Upgrade postgresql12-plpythonUpgrade postgresql-docsUpgrade postgresql12-serverUpgrade postgresql-contribUpgrade postgresql94-plpythonUpgrade postgresql10-docsUpgrade postgresql96-docsUpgrade postgresql-server-develUpgrade postgresql96-pltclUpgrade postgresql12-plperlUpgrade postgresql94-serverUpgrade postgresql96-develUpgrade postgresql12Upgrade postgresql10-contribUpgrade postgresql10-testUpgrade postgresql10-pltclUpgrade postgresql96-contribUpgrade postgresql-plperlUpgrade postgresql-llvmjitUpgrade postgresql12-llvmjitUpgrade postgresql12-develUpgrade postgresql10-develUpgrade postgresql96Upgrade postgresql10-plpythonUpgrade postgresql-pltclUpgrade postgresql94Upgrade postgresql94-plperlUpgrade libecpg6Upgrade postgresql-plpython | Aug 22, 2019 | Aug 8, 2019 |
| Ubuntu | — | Upgrade postgresql-11Upgrade postgresql-9.5Upgrade postgresql-10 | Aug 10, 2019 | Aug 8, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub