Search for packages
| purl | pkg:deb/debian/postgresql-17@17.9-0%2Bdeb13u1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4d43-twjt-v7hs | PostgreSQL oidvector discloses a few bytes of memorymore details |
CVE-2026-2003
|
| VCID-66hr-98m2-a3gc | PostgreSQL libpq retains an error message from man-in-the-middlemore details |
CVE-2024-10977
|
| VCID-6fq5-826e-fkeq | PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child tablemore details |
CVE-2025-8713
|
| VCID-7asd-nhem-wbbr | PostgreSQL pgcrypto heap buffer overflow executes arbitrary codemore details |
CVE-2026-2005
|
| VCID-8da2-zhsq-j7c4 | PostgreSQL SET ROLE, SET SESSION AUTHORIZATION reset to wrong user IDmore details |
CVE-2024-10978
|
| VCID-b13k-m1w4-1faz | PostgreSQL missing validation of multibyte character length executes arbitrary codemore details |
CVE-2026-2006
|
| VCID-dck8-zvk3-q7f8 | PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validationmore details |
CVE-2025-4207
|
| VCID-fck5-tfaf-5kbx | PostgreSQL CREATE STATISTICS does not check for schema CREATE privilegemore details |
CVE-2025-12817
|
| VCID-h5sa-959y-6fh4 | PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql clientmore details |
CVE-2025-8714
|
| VCID-kfy3-jgjm-myge | PostgreSQL libpq undersizes allocations, via integer wraparoundmore details |
CVE-2025-12818
|
| VCID-mxct-582s-pfad | PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validationmore details |
CVE-2025-1094
|
| VCID-npaz-u5a8-17bs | PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memorymore details |
CVE-2026-2007
|
| VCID-rac3-kfb9-efgf | PostgreSQL row security below e.g. subqueries disregards user ID changesmore details |
CVE-2024-10976
|
| VCID-ucu8-nb95-hfca | PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codemore details |
CVE-2026-2004
|
| VCID-wetm-n31c-e3as | PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target servermore details |
CVE-2025-8715
|
| VCID-wxxg-2f53-w3ey | PostgreSQL PL/Perl environment variable changes execute arbitrary codemore details |
CVE-2024-10979
|