Search for packages
| purl | pkg:deb/debian/postgresql-13@13.16-0%2Bdeb11u1?distro=bullseye |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-36gv-m96w-47db | Reconnection can downgrade connection security settingsmore details |
CVE-2020-25694
|
| VCID-3kph-5gzq-ryhu | Row security policies disregard user ID changes after inliningmore details |
CVE-2023-2455
|
| VCID-4d43-twjt-v7hs | PostgreSQL oidvector discloses a few bytes of memorymore details |
CVE-2026-2003
|
| VCID-4jdp-3xqp-ufap | Buffer overrun from integer overflow in array subscripting calculationsmore details |
CVE-2021-32027
|
| VCID-5py6-fe2j-d3f4 | CREATE SCHEMA ... schema_element defeats protective search_path changesmore details |
CVE-2023-2454
|
| VCID-621d-wrrx-n7ae | Restrict visibility of "pg_stats_ext" and "pg_stats_ext_exprs" entries to the table ownermore details |
CVE-2024-4317
|
| VCID-66hr-98m2-a3gc | PostgreSQL libpq retains an error message from man-in-the-middlemore details |
CVE-2024-10977
|
| VCID-6fq5-826e-fkeq | PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child tablemore details |
CVE-2025-8713
|
| VCID-7asd-nhem-wbbr | PostgreSQL pgcrypto heap buffer overflow executes arbitrary codemore details |
CVE-2026-2005
|
| VCID-8da2-zhsq-j7c4 | PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user IDmore details |
CVE-2024-10978
|
| VCID-8p8h-jdyq-vfek | Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATEmore details |
CVE-2021-32028
|
| VCID-ah54-w11h-eqef | PostgreSQL relation replacement during pg_dump executes arbitrary SQLmore details |
CVE-2024-7348
|
| VCID-b13k-m1w4-1faz | PostgreSQL missing validation of multibyte character length executes arbitrary codemore details |
CVE-2026-2006
|
| VCID-bdw5-v87c-zyfj | Multiple features escape "security restricted operation" sandboxmore details |
CVE-2020-25695
|
| VCID-brqx-ae92-83ep | Partition constraint violation errors leak values of denied columnsmore details |
CVE-2021-3393
|
| VCID-dck8-zvk3-q7f8 | PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validationmore details |
CVE-2025-4207
|
| VCID-dqcu-ceuq-wbb7 | MERGE fails to enforce UPDATE or SELECT row security policiesmore details |
CVE-2023-39418
|
| VCID-dv4x-n7v8-vyfh | Memory disclosure in partitioned-table UPDATE ... RETURNINGmore details |
CVE-2021-32029
|
| VCID-dwqe-a6p3-tyf6 | Buffer overrun from integer overflow in array modificationmore details |
CVE-2023-5869
|
| VCID-fck5-tfaf-5kbx | PostgreSQL CREATE STATISTICS does not check for schema CREATE privilegemore details |
CVE-2025-12817
|
| VCID-h5sa-959y-6fh4 | PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql clientmore details |
CVE-2025-8714
|
| VCID-j4cc-p1t3-tydy | PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQLmore details |
CVE-2024-0985
|
| VCID-kfy3-jgjm-myge | PostgreSQL libpq undersizes allocations, via integer wraparoundmore details |
CVE-2025-12818
|
| VCID-mxct-582s-pfad | PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validationmore details |
CVE-2025-1094
|
| VCID-npaz-u5a8-17bs | PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memorymore details |
CVE-2026-2007
|
| VCID-nuek-ypyh-b3dm | Extension scripts replace objects not belonging to the extensionmore details |
CVE-2022-2625
|
| VCID-nwfr-t7xn-zuae | Role "pg_signal_backend" can signal certain superuser processesmore details |
CVE-2023-5870
|
| VCID-q5z4-wv12-1fh7 | Memory disclosure in aggregate function callsmore details |
CVE-2023-5868
|
| VCID-q8ka-5dxw-w7fs | Autovacuum, REINDEX, and others omit "security restricted operation" sandboxmore details |
CVE-2022-1552
|
| VCID-qbd9-mpc6-5bap | libpq processes unencrypted bytes from man-in-the-middlemore details |
CVE-2021-23222
|
| VCID-rac3-kfb9-efgf | PostgreSQL row security below e.g. subqueries disregards user ID changesmore details |
CVE-2024-10976
|
| VCID-srbh-8fdq-bkc2 | Server processes unencrypted bytes from man-in-the-middlemore details |
CVE-2021-23214
|
| VCID-u751-gq61-fbge | Client memory disclosure when connecting, with Kerberos, to modified servermore details |
CVE-2022-41862
|
| VCID-ucu8-nb95-hfca | PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codemore details |
CVE-2026-2004
|
| VCID-uqwy-cnqz-skam | postgresql: Stack buffer overflow when continuously send SIGHUP |
CVE-2020-21469
|
| VCID-wetm-n31c-e3as | PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target servermore details |
CVE-2025-8715
|
| VCID-wxxg-2f53-w3ey | PostgreSQL PL/Perl environment variable changes execute arbitrary codemore details |
CVE-2024-10979
|
| VCID-xjv3-x91m-qqhn | psql's \gset allows overwriting specially treated variablesmore details |
CVE-2020-25696
|
| VCID-y871-sfhf-a7by | Extension script @substitutions@ within quoting allow SQL injectionmore details |
CVE-2023-39417
|
| VCID-ypkh-786b-aka8 | Single-column SELECT privilege enables reading all columnsmore details |
CVE-2021-20229
|
| VCID-yy3k-mszq-cbcs | Memory disclosure in certain queriesmore details |
CVE-2021-3677
|