Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/postgresql@9.0.0
purl pkg:generic/postgresql@9.0.0
Next non-vulnerable version 9.0.1
Latest non-vulnerable version 18.2.0
Risk 10.0
Vulnerabilities affecting this package (29)
Vulnerability Summary Fixed by
VCID-1qap-rdxz-4uer
Aliases:
CVE-2015-3167
pgcrypto has multiple error messages for decryption with an incorrect key.more details
9.0.20
Affected by 0 other vulnerabilities.
9.1.16
Affected by 0 other vulnerabilities.
9.2.11
Affected by 0 other vulnerabilities.
9.3.7
Affected by 0 other vulnerabilities.
9.4.2
Affected by 0 other vulnerabilities.
VCID-2nve-471m-17h6
Aliases:
CVE-2012-2655
SECURITY DEFINER and SET attributes on procedural call handlers are not ignored and can be used to crash the servermore details
9.0.8
Affected by 0 other vulnerabilities.
9.1.4
Affected by 0 other vulnerabilities.
VCID-35a3-5eq3-8bep
Aliases:
CVE-2012-2143
Passwords containing the byte 0x80 passed to the crypt() function in pgcrypto are incorrectly truncated if DES encryption was usedmore details
9.0.8
Affected by 0 other vulnerabilities.
9.1.4
Affected by 0 other vulnerabilities.
VCID-625c-amyd-dybm
Aliases:
CVE-2015-3166
Unanticipated errors from the standard library.more details
9.0.20
Affected by 0 other vulnerabilities.
9.1.16
Affected by 0 other vulnerabilities.
9.2.11
Affected by 0 other vulnerabilities.
9.3.7
Affected by 0 other vulnerabilities.
9.4.2
Affected by 0 other vulnerabilities.
VCID-666x-ret3-xufr
Aliases:
CVE-2010-4015
An authenticated database user can cause a buffer overrun by calling functions from the intarray optional module with certain parameters.more details
9.0.3
Affected by 0 other vulnerabilities.
VCID-6mck-xykx-yuba
Aliases:
CVE-2013-0255
executing enum_recv() with wrong parameters crashes servermore details
9.0.12
Affected by 0 other vulnerabilities.
9.1.8
Affected by 0 other vulnerabilities.
9.2.3
Affected by 0 other vulnerabilities.
VCID-7jb6-q4x1-cfbw
Aliases:
CVE-2012-3489
xml_parse() DTD validation can be used to read arbitrary filesmore details
9.0.9
Affected by 0 other vulnerabilities.
9.1.5
Affected by 0 other vulnerabilities.
VCID-7q99-jk4u-1fen
Aliases:
CVE-2010-3433
An authenticated database user can manipulate modules and tied variables in some external procedural languages to execute code with enhanced privileges.Detailsmore details
9.0.1
Affected by 0 other vulnerabilities.
VCID-811b-x31n-tfch
Aliases:
CVE-2012-0866
Permissions on a function called by a trigger are not properly checked.more details
9.0.7
Affected by 0 other vulnerabilities.
9.1.3
Affected by 0 other vulnerabilities.
VCID-8cbh-gwwy-n3eq
Aliases:
CVE-2014-0064
Potential buffer overruns due to integer overflow in size calculations.more details
9.0.16
Affected by 0 other vulnerabilities.
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-8j4f-u2tq-1qev
Aliases:
CVE-2014-0061
Privilege escalation via calls to validator functions.more details
9.0.16
Affected by 0 other vulnerabilities.
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-a3sh-4t1e-tbh4
Aliases:
CVE-2015-0244
An error in extended protocol message reading.more details
9.0.19
Affected by 0 other vulnerabilities.
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
VCID-bdq4-br3j-7kb8
Aliases:
CVE-2012-3488
contrib/xml2's xslt_process() can be used to read and write arbitrary filesmore details
9.0.9
Affected by 0 other vulnerabilities.
9.1.5
Affected by 0 other vulnerabilities.
VCID-bqag-mh3g-fqe7
Aliases:
CVE-2014-0067
Unauthenticated users may gain access to the database server during "make check"..more details
9.0.19
Affected by 0 other vulnerabilities.
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
VCID-f976-dd3s-fuc8
Aliases:
CVE-2015-0243
Memory errors in functions in the pgcrypto extension.more details
9.0.19
Affected by 0 other vulnerabilities.
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
VCID-fd5z-bj21-m3a5
Aliases:
CVE-2015-5288
Memory leak in crypt() function.more details
9.0.23
Affected by 0 other vulnerabilities.
9.1.19
Affected by 0 other vulnerabilities.
9.2.14
Affected by 0 other vulnerabilities.
9.3.10
Affected by 0 other vulnerabilities.
9.4.5
Affected by 0 other vulnerabilities.
VCID-g4tm-8zhw-a7hn
Aliases:
CVE-2013-1900
Random numbers generated by contrib/pgcrypto functions may be easy for another database user to guessmore details
9.0.13
Affected by 0 other vulnerabilities.
9.1.9
Affected by 0 other vulnerabilities.
9.2.4
Affected by 0 other vulnerabilities.
VCID-k38h-5crc-u3hr
Aliases:
CVE-2015-0242
Buffer overrun in replacement printf family of functions.more details
9.0.19
Affected by 0 other vulnerabilities.
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
VCID-kbgc-w2jw-auh8
Aliases:
CVE-2014-0062
Race condition in CREATE INDEX allows for privilege escalation.more details
9.0.16
Affected by 0 other vulnerabilities.
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-mebz-9qb7-5bd2
Aliases:
CVE-2015-3165
Double "free" after authentication timeoutmore details
9.0.20
Affected by 0 other vulnerabilities.
9.1.16
Affected by 0 other vulnerabilities.
9.2.11
Affected by 0 other vulnerabilities.
9.3.7
Affected by 0 other vulnerabilities.
9.4.2
Affected by 0 other vulnerabilities.
VCID-n3ka-63rx-5fgk
Aliases:
CVE-2013-1899
A connection request containing a database name that begins with "-" may be crafted to damage or destroy files within a server's data directorymore details
9.0.13
Affected by 0 other vulnerabilities.
9.1.9
Affected by 0 other vulnerabilities.
9.2.4
Affected by 0 other vulnerabilities.
VCID-nz16-gzhk-h3c1
Aliases:
CVE-2014-0065
Potential buffer overruns of fixed-size buffers.more details
9.0.16
Affected by 0 other vulnerabilities.
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-pvxg-byvu-pbec
Aliases:
CVE-2014-0066
Potential null pointer dereference crash when crypt(3) returns NULL.more details
9.0.16
Affected by 0 other vulnerabilities.
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-quqr-bg9k-7yb5
Aliases:
CVE-2012-0868
Line breaks in object names can be exploited to execute arbitrary SQL when reloading a pg_dump file.more details
9.0.7
Affected by 0 other vulnerabilities.
9.1.3
Affected by 0 other vulnerabilities.
VCID-raqj-ezua-skeb
Aliases:
CVE-2015-0241
Buffer overruns in "to_char" functions.more details
9.0.19
Affected by 0 other vulnerabilities.
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
VCID-reab-s9cu-yudn
Aliases:
CVE-2014-0063
Potential buffer overruns in datetime input/output.more details
9.0.16
Affected by 0 other vulnerabilities.
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-ux6m-dn6j-37dc
Aliases:
CVE-2012-0867
SSL certificate name checks are truncated to 32 characters, allowing connection spoofing under some circumstances when using third party certificate authorities.more details
9.0.7
Affected by 0 other vulnerabilities.
9.1.3
Affected by 0 other vulnerabilities.
VCID-w518-wkek-97ag
Aliases:
CVE-2014-0060
SET ROLE bypasses lack of ADMIN OPTION.more details
9.0.16
Affected by 0 other vulnerabilities.
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-zbj3-7xug-43f6
Aliases:
CVE-2014-8161
Constraint violation errors can cause display of values in columns which the user would not normally have rights to see.more details
9.0.19
Affected by 0 other vulnerabilities.
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:36:06.657988+00:00 PostgreSQL Importer Affected by VCID-n3ka-63rx-5fgk https://www.postgresql.org/support/security/CVE-2013-1899 38.0.0
2026-04-01T12:36:04.233522+00:00 PostgreSQL Importer Affected by VCID-666x-ret3-xufr https://www.postgresql.org/support/security/CVE-2010-4015 38.0.0
2026-04-01T12:36:04.186431+00:00 PostgreSQL Importer Affected by VCID-811b-x31n-tfch https://www.postgresql.org/support/security/CVE-2012-0866 38.0.0
2026-04-01T12:36:04.155042+00:00 PostgreSQL Importer Affected by VCID-ux6m-dn6j-37dc https://www.postgresql.org/support/security/CVE-2012-0867 38.0.0
2026-04-01T12:36:04.108842+00:00 PostgreSQL Importer Affected by VCID-quqr-bg9k-7yb5 https://www.postgresql.org/support/security/CVE-2012-0868 38.0.0
2026-04-01T12:36:04.066027+00:00 PostgreSQL Importer Affected by VCID-35a3-5eq3-8bep https://www.postgresql.org/support/security/CVE-2012-2143 38.0.0
2026-04-01T12:36:04.017608+00:00 PostgreSQL Importer Affected by VCID-2nve-471m-17h6 https://www.postgresql.org/support/security/CVE-2012-2655 38.0.0
2026-04-01T12:36:03.972111+00:00 PostgreSQL Importer Affected by VCID-bdq4-br3j-7kb8 https://www.postgresql.org/support/security/CVE-2012-3488 38.0.0
2026-04-01T12:36:03.925457+00:00 PostgreSQL Importer Affected by VCID-7jb6-q4x1-cfbw https://www.postgresql.org/support/security/CVE-2012-3489 38.0.0
2026-04-01T12:36:03.859662+00:00 PostgreSQL Importer Affected by VCID-6mck-xykx-yuba https://www.postgresql.org/support/security/CVE-2013-0255 38.0.0
2026-04-01T12:36:03.808212+00:00 PostgreSQL Importer Affected by VCID-g4tm-8zhw-a7hn https://www.postgresql.org/support/security/CVE-2013-1900 38.0.0
2026-04-01T12:36:03.742083+00:00 PostgreSQL Importer Affected by VCID-w518-wkek-97ag https://www.postgresql.org/support/security/CVE-2014-0060 38.0.0
2026-04-01T12:36:03.677503+00:00 PostgreSQL Importer Affected by VCID-8j4f-u2tq-1qev https://www.postgresql.org/support/security/CVE-2014-0061 38.0.0
2026-04-01T12:36:03.606992+00:00 PostgreSQL Importer Affected by VCID-kbgc-w2jw-auh8 https://www.postgresql.org/support/security/CVE-2014-0062 38.0.0
2026-04-01T12:36:03.536703+00:00 PostgreSQL Importer Affected by VCID-reab-s9cu-yudn https://www.postgresql.org/support/security/CVE-2014-0063 38.0.0
2026-04-01T12:36:03.462592+00:00 PostgreSQL Importer Affected by VCID-8cbh-gwwy-n3eq https://www.postgresql.org/support/security/CVE-2014-0064 38.0.0
2026-04-01T12:36:03.393076+00:00 PostgreSQL Importer Affected by VCID-nz16-gzhk-h3c1 https://www.postgresql.org/support/security/CVE-2014-0065 38.0.0
2026-04-01T12:36:03.317683+00:00 PostgreSQL Importer Affected by VCID-pvxg-byvu-pbec https://www.postgresql.org/support/security/CVE-2014-0066 38.0.0
2026-04-01T12:35:58.863386+00:00 PostgreSQL Importer Affected by VCID-7q99-jk4u-1fen https://www.postgresql.org/support/security/CVE-2010-3433 38.0.0
2026-04-01T12:35:56.774887+00:00 PostgreSQL Importer Affected by VCID-bqag-mh3g-fqe7 https://www.postgresql.org/support/security/CVE-2014-0067 38.0.0
2026-04-01T12:35:56.702595+00:00 PostgreSQL Importer Affected by VCID-zbj3-7xug-43f6 https://www.postgresql.org/support/security/CVE-2014-8161 38.0.0
2026-04-01T12:35:56.630327+00:00 PostgreSQL Importer Affected by VCID-raqj-ezua-skeb https://www.postgresql.org/support/security/CVE-2015-0241 38.0.0
2026-04-01T12:35:56.561120+00:00 PostgreSQL Importer Affected by VCID-k38h-5crc-u3hr https://www.postgresql.org/support/security/CVE-2015-0242 38.0.0
2026-04-01T12:35:56.489865+00:00 PostgreSQL Importer Affected by VCID-f976-dd3s-fuc8 https://www.postgresql.org/support/security/CVE-2015-0243 38.0.0
2026-04-01T12:35:56.413950+00:00 PostgreSQL Importer Affected by VCID-a3sh-4t1e-tbh4 https://www.postgresql.org/support/security/CVE-2015-0244 38.0.0
2026-04-01T12:35:56.339699+00:00 PostgreSQL Importer Affected by VCID-mebz-9qb7-5bd2 https://www.postgresql.org/support/security/CVE-2015-3165 38.0.0
2026-04-01T12:35:56.265719+00:00 PostgreSQL Importer Affected by VCID-625c-amyd-dybm https://www.postgresql.org/support/security/CVE-2015-3166 38.0.0
2026-04-01T12:35:56.187902+00:00 PostgreSQL Importer Affected by VCID-1qap-rdxz-4uer https://www.postgresql.org/support/security/CVE-2015-3167 38.0.0
2026-04-01T12:35:56.115314+00:00 PostgreSQL Importer Affected by VCID-fd5z-bj21-m3a5 https://www.postgresql.org/support/security/CVE-2015-5288 38.0.0