A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11.5 where arbitrary SQL statements can be executed given a suitable SECURITY DEFINER function. An attacker, with EXECUTE permission on the function, can execute arbitrary SQL as the owner of the function.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-serverUpgrade postgresql-plperlUpgrade postgresql-test | May 4, 2022 | Oct 29, 2019 |
| Alpine Linux | — | Upgrade postgresql14Upgrade postgresql15Upgrade postgresql | Nov 8, 2019 | Oct 29, 2019 |
| Amazon Linux Ami 2 | — | Upgrade postgresql-develUpgrade postgresql-plpythonUpgrade postgresql-contribUpgrade postgresql-plperlUpgrade postgresql-pltclUpgrade postgresql-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-docsUpgrade postgresql-staticUpgrade postgresql-serverUpgrade postgresqlUpgrade postgresql-testUpgrade postgresql-libs | Jun 24, 2021 | Oct 29, 2019 |
| Amazon_linux | — | Upgrade postgresql94Upgrade postgresql96Upgrade postgresql95Upgrade postgresql92 | Oct 28, 2020 | Aug 8, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 29, 2019 |
| Centos_linux | — | Upgrade postgresql-upgrade-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plpythonUpgrade postgresql-docs-debuginfoUpgrade postgresql-pltclUpgrade postgresql-staticUpgrade postgresql-plperl-debuginfoUpgrade postgresql-serverUpgrade postgresql-libsUpgrade postgresql-test-rpm-macrosUpgrade postgresql-debuginfoUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgresql-test-debuginfoUpgrade postgresql-testUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-develUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-develUpgrade postgresql-upgradeUpgrade postgresql-server-develUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-pltcl-debuginfoUpgrade postgresql-contrib | Sep 9, 2020 | Oct 29, 2019 |
| Debian | — | Upgrade postgresql-11 | Aug 13, 2019 | Aug 13, 2019 |
| Freebsd | — | Upgrade postgresql96-serverUpgrade postgresql94-serverUpgrade postgresql95-serverUpgrade postgresql10-serverUpgrade postgresql11-server | Aug 9, 2019 | Aug 8, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-develUpgrade postgresql-libsUpgrade postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-pltclUpgrade postgresql-contribUpgrade postgresqlUpgrade postgresql-test | Sep 30, 2019 | Aug 8, 2019 |
| Oracle_linux | — | Upgrade rh-postgresql10-postgresql-serverUpgrade rh-postgresql10-postgresql-pltclUpgrade rh-postgresql10-postgresqlUpgrade postgresql-plpython3Upgrade rh-postgresql10-postgresql-server-syspathsUpgrade rh-postgresql10-postgresql-plperlUpgrade postgresql-upgradeUpgrade rh-postgresql10-postgresql-staticUpgrade rh-postgresql10-postgresql-contribUpgrade postgresql-server-develUpgrade postgresql-upgrade-develUpgrade rh-postgresql10-postgresql-develUpgrade rh-postgresql10-postgresql-libsUpgrade rh-postgresql10-postgresql-syspathsUpgrade rh-postgresql10-postgresql-testUpgrade postgresql-testUpgrade postgresql-test-rpm-macrosUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-pltclUpgrade postgresql-develUpgrade rh-postgresql10-postgresql-contrib-syspathsUpgrade postgresql-contribUpgrade postgresql-serverUpgrade rh-postgresql10-postgresql-docsUpgrade postgresql-plpythonUpgrade postgresql-plperlUpgrade rh-postgresql10-postgresql-plpythonUpgrade postgresql-libsUpgrade postgresql | Sep 10, 2020 | Aug 8, 2019 |
| Postgres | — | Upgrade to PostgreSQL version 11.5 | Aug 9, 2019 | Aug 9, 2019 |
| Redhat_linux | — | Upgrade postgresql-plpythonUpgrade postgresql-test-rpm-macrosUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-debuginfoUpgrade postgresql-staticUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-plperlUpgrade postgresql-testUpgrade postgresqlUpgrade postgresql-server-debuginfoUpgrade postgresql-libsUpgrade postgresql-contrib-debuginfoUpgrade postgresql-contribUpgrade postgresql-server-develUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-test-debuginfoNo solution existsUpgrade postgresql-upgrade-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-plpython3Upgrade postgresql-pltclUpgrade postgresql-develUpgrade postgresql-upgradeUpgrade postgresql-plperl-debuginfoUpgrade postgresql-plpython3-debuginfo | Sep 9, 2020 | Oct 29, 2019 |
| Suse | — | Upgrade postgresql-docsUpgrade postgresql96-plperlUpgrade postgresql96-serverUpgrade postgresql10-plperlUpgrade postgresql10Upgrade libecpg6-32bitUpgrade postgresql96-testUpgrade postgresql94-contribUpgrade postgresql-testUpgrade postgresql12-server-develUpgrade postgresql12-contribUpgrade postgresql94-docsUpgrade postgresql12-testUpgrade postgresql96-plpythonUpgrade postgresql12-docsUpgrade libpq5-32bitUpgrade postgresql12-pltclUpgrade postgresql-develUpgrade postgresql94-pltclUpgrade postgresql12-plpythonUpgrade postgresql12-serverUpgrade postgresqlUpgrade postgresql10-serverUpgrade postgresql-serverUpgrade libpq5Upgrade postgresql10-develUpgrade postgresql94-plperlUpgrade postgresql10-contribUpgrade postgresql12-llvmjitUpgrade postgresql-plperlUpgrade postgresql10-testUpgrade postgresql-contribUpgrade postgresql94Upgrade postgresql-plpythonUpgrade postgresql96-pltclUpgrade postgresql-server-develUpgrade postgresql96-develUpgrade postgresql10-pltclUpgrade postgresql96-docsUpgrade postgresql12Upgrade libecpg6Upgrade postgresql-llvmjitUpgrade postgresql96-contribUpgrade postgresql12-plperlUpgrade postgresql94-serverUpgrade postgresql10-plpythonUpgrade postgresql-pltclUpgrade postgresql96Upgrade postgresql10-docsUpgrade postgresql12-develUpgrade postgresql94-plpython | Aug 22, 2019 | Aug 8, 2019 |
| Ubuntu | — | Upgrade postgresql-10Upgrade postgresql-11Upgrade postgresql-9.5 | Aug 10, 2019 | Aug 8, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub