Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/postgresql@9.1.0
purl pkg:generic/postgresql@9.1.0
Next non-vulnerable version 9.1.3
Latest non-vulnerable version 18.2.0
Risk 10.0
Vulnerabilities affecting this package (32)
Vulnerability Summary Fixed by
VCID-1qap-rdxz-4uer
Aliases:
CVE-2015-3167
pgcrypto has multiple error messages for decryption with an incorrect key.more details
9.1.16
Affected by 0 other vulnerabilities.
9.2.11
Affected by 0 other vulnerabilities.
9.3.7
Affected by 0 other vulnerabilities.
9.4.2
Affected by 0 other vulnerabilities.
VCID-2nve-471m-17h6
Aliases:
CVE-2012-2655
SECURITY DEFINER and SET attributes on procedural call handlers are not ignored and can be used to crash the servermore details
9.1.4
Affected by 0 other vulnerabilities.
VCID-35a3-5eq3-8bep
Aliases:
CVE-2012-2143
Passwords containing the byte 0x80 passed to the crypt() function in pgcrypto are incorrectly truncated if DES encryption was usedmore details
9.1.4
Affected by 0 other vulnerabilities.
VCID-625c-amyd-dybm
Aliases:
CVE-2015-3166
Unanticipated errors from the standard library.more details
9.1.16
Affected by 0 other vulnerabilities.
9.2.11
Affected by 0 other vulnerabilities.
9.3.7
Affected by 0 other vulnerabilities.
9.4.2
Affected by 0 other vulnerabilities.
VCID-6mck-xykx-yuba
Aliases:
CVE-2013-0255
executing enum_recv() with wrong parameters crashes servermore details
9.1.8
Affected by 0 other vulnerabilities.
9.2.3
Affected by 0 other vulnerabilities.
VCID-7jb6-q4x1-cfbw
Aliases:
CVE-2012-3489
xml_parse() DTD validation can be used to read arbitrary filesmore details
9.1.5
Affected by 0 other vulnerabilities.
VCID-811b-x31n-tfch
Aliases:
CVE-2012-0866
Permissions on a function called by a trigger are not properly checked.more details
9.1.3
Affected by 0 other vulnerabilities.
VCID-8bu8-zpfv-8bgg
Aliases:
CVE-2016-5424
Exceptional database and role names could enable escalation to superusermore details
9.1.23
Affected by 0 other vulnerabilities.
9.2.18
Affected by 0 other vulnerabilities.
9.3.14
Affected by 0 other vulnerabilities.
9.4.9
Affected by 0 other vulnerabilities.
9.5.4
Affected by 0 other vulnerabilities.
VCID-8cbh-gwwy-n3eq
Aliases:
CVE-2014-0064
Potential buffer overruns due to integer overflow in size calculations.more details
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-8j4f-u2tq-1qev
Aliases:
CVE-2014-0061
Privilege escalation via calls to validator functions.more details
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-9b6v-1bt1-dfgy
Aliases:
CVE-2016-5423
Certain nested CASE/WHEN expressions can crash servermore details
9.1.23
Affected by 0 other vulnerabilities.
9.2.18
Affected by 0 other vulnerabilities.
9.3.14
Affected by 0 other vulnerabilities.
9.4.9
Affected by 0 other vulnerabilities.
9.5.4
Affected by 0 other vulnerabilities.
VCID-a3sh-4t1e-tbh4
Aliases:
CVE-2015-0244
An error in extended protocol message reading.more details
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
VCID-bdq4-br3j-7kb8
Aliases:
CVE-2012-3488
contrib/xml2's xslt_process() can be used to read and write arbitrary filesmore details
9.1.5
Affected by 0 other vulnerabilities.
VCID-bqag-mh3g-fqe7
Aliases:
CVE-2014-0067
Unauthenticated users may gain access to the database server during "make check"..more details
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
VCID-f976-dd3s-fuc8
Aliases:
CVE-2015-0243
Memory errors in functions in the pgcrypto extension.more details
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
VCID-fd5z-bj21-m3a5
Aliases:
CVE-2015-5288
Memory leak in crypt() function.more details
9.1.19
Affected by 0 other vulnerabilities.
9.2.14
Affected by 0 other vulnerabilities.
9.3.10
Affected by 0 other vulnerabilities.
9.4.5
Affected by 0 other vulnerabilities.
VCID-g4tm-8zhw-a7hn
Aliases:
CVE-2013-1900
Random numbers generated by contrib/pgcrypto functions may be easy for another database user to guessmore details
9.1.9
Affected by 0 other vulnerabilities.
9.2.4
Affected by 0 other vulnerabilities.
VCID-k38h-5crc-u3hr
Aliases:
CVE-2015-0242
Buffer overrun in replacement printf family of functions.more details
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
VCID-kbgc-w2jw-auh8
Aliases:
CVE-2014-0062
Race condition in CREATE INDEX allows for privilege escalation.more details
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-mebz-9qb7-5bd2
Aliases:
CVE-2015-3165
Double "free" after authentication timeoutmore details
9.1.16
Affected by 0 other vulnerabilities.
9.2.11
Affected by 0 other vulnerabilities.
9.3.7
Affected by 0 other vulnerabilities.
9.4.2
Affected by 0 other vulnerabilities.
VCID-n3ka-63rx-5fgk
Aliases:
CVE-2013-1899
A connection request containing a database name that begins with "-" may be crafted to damage or destroy files within a server's data directorymore details
9.1.9
Affected by 0 other vulnerabilities.
9.2.4
Affected by 0 other vulnerabilities.
VCID-nz16-gzhk-h3c1
Aliases:
CVE-2014-0065
Potential buffer overruns of fixed-size buffers.more details
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-pvxg-byvu-pbec
Aliases:
CVE-2014-0066
Potential null pointer dereference crash when crypt(3) returns NULL.more details
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-quqr-bg9k-7yb5
Aliases:
CVE-2012-0868
Line breaks in object names can be exploited to execute arbitrary SQL when reloading a pg_dump file.more details
9.1.3
Affected by 0 other vulnerabilities.
VCID-raqj-ezua-skeb
Aliases:
CVE-2015-0241
Buffer overruns in "to_char" functions.more details
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
VCID-reab-s9cu-yudn
Aliases:
CVE-2014-0063
Potential buffer overruns in datetime input/output.more details
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-skb5-eeak-v7hz
Aliases:
CVE-2013-1901
An unprivileged user can run commands that could interfere with in-progress backups.more details
9.1.9
Affected by 0 other vulnerabilities.
9.2.4
Affected by 0 other vulnerabilities.
VCID-t864-ytjh-nyg1
Aliases:
CVE-2016-0773
Unchecked regex can crash the servermore details
9.1.20
Affected by 0 other vulnerabilities.
9.2.15
Affected by 0 other vulnerabilities.
9.3.11
Affected by 0 other vulnerabilities.
9.4.6
Affected by 0 other vulnerabilities.
9.5.1
Affected by 0 other vulnerabilities.
VCID-ux6m-dn6j-37dc
Aliases:
CVE-2012-0867
SSL certificate name checks are truncated to 32 characters, allowing connection spoofing under some circumstances when using third party certificate authorities.more details
9.1.3
Affected by 0 other vulnerabilities.
VCID-w518-wkek-97ag
Aliases:
CVE-2014-0060
SET ROLE bypasses lack of ADMIN OPTION.more details
9.1.12
Affected by 0 other vulnerabilities.
9.2.7
Affected by 0 other vulnerabilities.
9.3.3
Affected by 0 other vulnerabilities.
VCID-z4t8-c8vc-ayhd
Aliases:
CVE-2016-7048
Interactive installer downloads software over plain HTTP, then executes itmore details
9.1.24
Affected by 0 other vulnerabilities.
9.2.19
Affected by 0 other vulnerabilities.
9.3.15
Affected by 0 other vulnerabilities.
9.4.10
Affected by 0 other vulnerabilities.
9.5.5
Affected by 0 other vulnerabilities.
VCID-zbj3-7xug-43f6
Aliases:
CVE-2014-8161
Constraint violation errors can cause display of values in columns which the user would not normally have rights to see.more details
9.1.15
Affected by 0 other vulnerabilities.
9.2.10
Affected by 0 other vulnerabilities.
9.3.6
Affected by 0 other vulnerabilities.
9.4.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:36:06.660120+00:00 PostgreSQL Importer Affected by VCID-n3ka-63rx-5fgk https://www.postgresql.org/support/security/CVE-2013-1899 38.0.0
2026-04-01T12:36:06.586229+00:00 PostgreSQL Importer Affected by VCID-skb5-eeak-v7hz https://www.postgresql.org/support/security/CVE-2013-1901 38.0.0
2026-04-01T12:36:04.188001+00:00 PostgreSQL Importer Affected by VCID-811b-x31n-tfch https://www.postgresql.org/support/security/CVE-2012-0866 38.0.0
2026-04-01T12:36:04.156479+00:00 PostgreSQL Importer Affected by VCID-ux6m-dn6j-37dc https://www.postgresql.org/support/security/CVE-2012-0867 38.0.0
2026-04-01T12:36:04.110310+00:00 PostgreSQL Importer Affected by VCID-quqr-bg9k-7yb5 https://www.postgresql.org/support/security/CVE-2012-0868 38.0.0
2026-04-01T12:36:04.067451+00:00 PostgreSQL Importer Affected by VCID-35a3-5eq3-8bep https://www.postgresql.org/support/security/CVE-2012-2143 38.0.0
2026-04-01T12:36:04.019302+00:00 PostgreSQL Importer Affected by VCID-2nve-471m-17h6 https://www.postgresql.org/support/security/CVE-2012-2655 38.0.0
2026-04-01T12:36:03.973983+00:00 PostgreSQL Importer Affected by VCID-bdq4-br3j-7kb8 https://www.postgresql.org/support/security/CVE-2012-3488 38.0.0
2026-04-01T12:36:03.926946+00:00 PostgreSQL Importer Affected by VCID-7jb6-q4x1-cfbw https://www.postgresql.org/support/security/CVE-2012-3489 38.0.0
2026-04-01T12:36:03.861215+00:00 PostgreSQL Importer Affected by VCID-6mck-xykx-yuba https://www.postgresql.org/support/security/CVE-2013-0255 38.0.0
2026-04-01T12:36:03.810271+00:00 PostgreSQL Importer Affected by VCID-g4tm-8zhw-a7hn https://www.postgresql.org/support/security/CVE-2013-1900 38.0.0
2026-04-01T12:36:03.743784+00:00 PostgreSQL Importer Affected by VCID-w518-wkek-97ag https://www.postgresql.org/support/security/CVE-2014-0060 38.0.0
2026-04-01T12:36:03.679000+00:00 PostgreSQL Importer Affected by VCID-8j4f-u2tq-1qev https://www.postgresql.org/support/security/CVE-2014-0061 38.0.0
2026-04-01T12:36:03.608843+00:00 PostgreSQL Importer Affected by VCID-kbgc-w2jw-auh8 https://www.postgresql.org/support/security/CVE-2014-0062 38.0.0
2026-04-01T12:36:03.538604+00:00 PostgreSQL Importer Affected by VCID-reab-s9cu-yudn https://www.postgresql.org/support/security/CVE-2014-0063 38.0.0
2026-04-01T12:36:03.464459+00:00 PostgreSQL Importer Affected by VCID-8cbh-gwwy-n3eq https://www.postgresql.org/support/security/CVE-2014-0064 38.0.0
2026-04-01T12:36:03.394650+00:00 PostgreSQL Importer Affected by VCID-nz16-gzhk-h3c1 https://www.postgresql.org/support/security/CVE-2014-0065 38.0.0
2026-04-01T12:36:03.319424+00:00 PostgreSQL Importer Affected by VCID-pvxg-byvu-pbec https://www.postgresql.org/support/security/CVE-2014-0066 38.0.0
2026-04-01T12:35:56.776845+00:00 PostgreSQL Importer Affected by VCID-bqag-mh3g-fqe7 https://www.postgresql.org/support/security/CVE-2014-0067 38.0.0
2026-04-01T12:35:56.704333+00:00 PostgreSQL Importer Affected by VCID-zbj3-7xug-43f6 https://www.postgresql.org/support/security/CVE-2014-8161 38.0.0
2026-04-01T12:35:56.632237+00:00 PostgreSQL Importer Affected by VCID-raqj-ezua-skeb https://www.postgresql.org/support/security/CVE-2015-0241 38.0.0
2026-04-01T12:35:56.562716+00:00 PostgreSQL Importer Affected by VCID-k38h-5crc-u3hr https://www.postgresql.org/support/security/CVE-2015-0242 38.0.0
2026-04-01T12:35:56.491676+00:00 PostgreSQL Importer Affected by VCID-f976-dd3s-fuc8 https://www.postgresql.org/support/security/CVE-2015-0243 38.0.0
2026-04-01T12:35:56.415705+00:00 PostgreSQL Importer Affected by VCID-a3sh-4t1e-tbh4 https://www.postgresql.org/support/security/CVE-2015-0244 38.0.0
2026-04-01T12:35:56.341738+00:00 PostgreSQL Importer Affected by VCID-mebz-9qb7-5bd2 https://www.postgresql.org/support/security/CVE-2015-3165 38.0.0
2026-04-01T12:35:56.267650+00:00 PostgreSQL Importer Affected by VCID-625c-amyd-dybm https://www.postgresql.org/support/security/CVE-2015-3166 38.0.0
2026-04-01T12:35:56.189893+00:00 PostgreSQL Importer Affected by VCID-1qap-rdxz-4uer https://www.postgresql.org/support/security/CVE-2015-3167 38.0.0
2026-04-01T12:35:56.116902+00:00 PostgreSQL Importer Affected by VCID-fd5z-bj21-m3a5 https://www.postgresql.org/support/security/CVE-2015-5288 38.0.0
2026-04-01T12:35:56.015598+00:00 PostgreSQL Importer Affected by VCID-t864-ytjh-nyg1 https://www.postgresql.org/support/security/CVE-2016-0773 38.0.0
2026-04-01T12:35:55.941950+00:00 PostgreSQL Importer Affected by VCID-9b6v-1bt1-dfgy https://www.postgresql.org/support/security/CVE-2016-5423 38.0.0
2026-04-01T12:35:55.872058+00:00 PostgreSQL Importer Affected by VCID-8bu8-zpfv-8bgg https://www.postgresql.org/support/security/CVE-2016-5424 38.0.0
2026-04-01T12:35:55.800427+00:00 PostgreSQL Importer Affected by VCID-z4t8-c8vc-ayhd https://www.postgresql.org/support/security/CVE-2016-7048 38.0.0