Search for packages
| purl | pkg:deb/debian/postgresql-15@15.15-0%2Bdeb12u1?distro=bookworm |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3kph-5gzq-ryhu | Row security policies disregard user ID changes after inliningmore details |
CVE-2023-2455
|
| VCID-4d43-twjt-v7hs | PostgreSQL oidvector discloses a few bytes of memorymore details |
CVE-2026-2003
|
| VCID-5py6-fe2j-d3f4 | CREATE SCHEMA ... schema_element defeats protective search_path changesmore details |
CVE-2023-2454
|
| VCID-621d-wrrx-n7ae | Restrict visibility of "pg_stats_ext" and "pg_stats_ext_exprs" entries to the table ownermore details |
CVE-2024-4317
|
| VCID-66hr-98m2-a3gc | PostgreSQL libpq retains an error message from man-in-the-middlemore details |
CVE-2024-10977
|
| VCID-6fq5-826e-fkeq | PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child tablemore details |
CVE-2025-8713
|
| VCID-7asd-nhem-wbbr | PostgreSQL pgcrypto heap buffer overflow executes arbitrary codemore details |
CVE-2026-2005
|
| VCID-8da2-zhsq-j7c4 | PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user IDmore details |
CVE-2024-10978
|
| VCID-ah54-w11h-eqef | PostgreSQL relation replacement during pg_dump executes arbitrary SQLmore details |
CVE-2024-7348
|
| VCID-b13k-m1w4-1faz | PostgreSQL missing validation of multibyte character length executes arbitrary codemore details |
CVE-2026-2006
|
| VCID-dck8-zvk3-q7f8 | PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validationmore details |
CVE-2025-4207
|
| VCID-dqcu-ceuq-wbb7 | MERGE fails to enforce UPDATE or SELECT row security policiesmore details |
CVE-2023-39418
|
| VCID-dwqe-a6p3-tyf6 | Buffer overrun from integer overflow in array modificationmore details |
CVE-2023-5869
|
| VCID-fck5-tfaf-5kbx | PostgreSQL CREATE STATISTICS does not check for schema CREATE privilegemore details |
CVE-2025-12817
|
| VCID-h5sa-959y-6fh4 | PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql clientmore details |
CVE-2025-8714
|
| VCID-j4cc-p1t3-tydy | PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQLmore details |
CVE-2024-0985
|
| VCID-kfy3-jgjm-myge | PostgreSQL libpq undersizes allocations, via integer wraparoundmore details |
CVE-2025-12818
|
| VCID-mxct-582s-pfad | PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validationmore details |
CVE-2025-1094
|
| VCID-npaz-u5a8-17bs | PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memorymore details |
CVE-2026-2007
|
| VCID-nwfr-t7xn-zuae | Role "pg_signal_backend" can signal certain superuser processesmore details |
CVE-2023-5870
|
| VCID-q5z4-wv12-1fh7 | Memory disclosure in aggregate function callsmore details |
CVE-2023-5868
|
| VCID-rac3-kfb9-efgf | PostgreSQL row security below e.g. subqueries disregards user ID changesmore details |
CVE-2024-10976
|
| VCID-u751-gq61-fbge | Client memory disclosure when connecting, with Kerberos, to modified servermore details |
CVE-2022-41862
|
| VCID-ucu8-nb95-hfca | PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codemore details |
CVE-2026-2004
|
| VCID-wetm-n31c-e3as | PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target servermore details |
CVE-2025-8715
|
| VCID-wxxg-2f53-w3ey | PostgreSQL PL/Perl environment variable changes execute arbitrary codemore details |
CVE-2024-10979
|
| VCID-y871-sfhf-a7by | Extension script @substitutions@ within quoting allow SQL injectionmore details |
CVE-2023-39417
|