Search for packages
| purl | pkg:generic/postgresql@9.4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1qap-rdxz-4uer
Aliases: CVE-2015-3167 |
pgcrypto has multiple error messages for decryption with an incorrect key.more details |
Affected by 0 other vulnerabilities. |
|
VCID-3qrq-rc38-13ep
Aliases: CVE-2017-7546 |
empty password accepted in some authentication methodsmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-45vk-2xsq-cffk
Aliases: CVE-2017-7485 |
libpq ignores PGREQUIRESSL environment variablemore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-625c-amyd-dybm
Aliases: CVE-2015-3166 |
Unanticipated errors from the standard library.more details |
Affected by 0 other vulnerabilities. |
|
VCID-723y-bsbd-6kfd
Aliases: CVE-2017-7484 |
selectivity estimators bypass SELECT privilege checksmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-7xfn-1fv3-1bgv
Aliases: CVE-2018-1058 |
Uncontrolled search path element in pg_dump and other client applicationsmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-8bu8-zpfv-8bgg
Aliases: CVE-2016-5424 |
Exceptional database and role names could enable escalation to superusermore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-9b6v-1bt1-dfgy
Aliases: CVE-2016-5423 |
Certain nested CASE/WHEN expressions can crash servermore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-a3sh-4t1e-tbh4
Aliases: CVE-2015-0244 |
An error in extended protocol message reading.more details |
Affected by 0 other vulnerabilities. |
|
VCID-bb5j-e9vw-mbd1
Aliases: CVE-2019-10208 |
TYPE in pg_temp executes arbitrary SQL during SECURITY DEFINER executionmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-bqag-mh3g-fqe7
Aliases: CVE-2014-0067 |
Unauthenticated users may gain access to the database server during "make check"..more details |
Affected by 0 other vulnerabilities. |
|
VCID-csfh-831q-rqfv
Aliases: CVE-2017-7547 |
pg_user_mappings view discloses passwords to users lacking server privilegesmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-d362-bmcf-3kdz
Aliases: CVE-2017-15098 |
Memory disclosure in JSON functionsmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-esps-vak5-bqcp
Aliases: CVE-2015-5289 |
Unchecked JSON input can crash the servermore details |
Affected by 0 other vulnerabilities. |
|
VCID-f976-dd3s-fuc8
Aliases: CVE-2015-0243 |
Memory errors in functions in the pgcrypto extension.more details |
Affected by 0 other vulnerabilities. |
|
VCID-fd5z-bj21-m3a5
Aliases: CVE-2015-5288 |
Memory leak in crypt() function.more details |
Affected by 0 other vulnerabilities. |
|
VCID-k38h-5crc-u3hr
Aliases: CVE-2015-0242 |
Buffer overrun in replacement printf family of functions.more details |
Affected by 0 other vulnerabilities. |
|
VCID-mebz-9qb7-5bd2
Aliases: CVE-2015-3165 |
Double "free" after authentication timeoutmore details |
Affected by 0 other vulnerabilities. |
|
VCID-qn5k-y64c-7ffc
Aliases: CVE-2017-7486 |
pg_user_mappings view discloses foreign server passwordsmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-qnt9-qr7p-wkhy
Aliases: CVE-2017-12172 |
Start scripts permit database administrator to modify root-owned filesmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-raqj-ezua-skeb
Aliases: CVE-2015-0241 |
Buffer overruns in "to_char" functions.more details |
Affected by 0 other vulnerabilities. |
|
VCID-sq2s-cvrs-7uhh
Aliases: CVE-2018-10915 |
Certain host connection parameters defeat client-side security defensesmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-t864-ytjh-nyg1
Aliases: CVE-2016-0773 |
Unchecked regex can crash the servermore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-um7d-pzhb-n3c9
Aliases: CVE-2017-7548 |
lo_put() function ignores ACLsmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-wcsh-zz5q-qqbf
Aliases: CVE-2018-1053 |
pg_upgrade creates file of sensitive metadata under prevailing umaskmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-z4t8-c8vc-ayhd
Aliases: CVE-2016-7048 |
Interactive installer downloads software over plain HTTP, then executes itmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-zbj3-7xug-43f6
Aliases: CVE-2014-8161 |
Constraint violation errors can cause display of values in columns which the user would not normally have rights to see.more details |
Affected by 0 other vulnerabilities. |
|
VCID-zrcc-w98g-gfhk
Aliases: CVE-2019-3466 |
pg_ctlcluster script in postgresql-common does not drop privileges when creating socket/statistics temporary directoriesmore details |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||