Search for packages
Package details: pkg:deb/ubuntu/postgresql-9.3@9.3.24-0ubuntu0.14.04
purl pkg:deb/ubuntu/postgresql-9.3@9.3.24-0ubuntu0.14.04
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-jxde-hg99-aaap
Aliases:
CVE-2016-3065
CVE-2016-3065 postgresql: memory disclosure in pageinspect functions There are no reported fixed by versions.
VCID-pyvh-7h7a-aaar
Aliases:
CVE-2016-2193
CVE-2016-2193 postgresql: row security policies in prepared statements disregard user ID changes There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-c6cj-4u8q-aaap A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side connection security features, obtain access to higher privileged connections or potentially cause other impact through SQL injection, by causing the PQescape() functions to malfunction. Postgresql versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 are affected. CVE-2018-10915

Date Actor Action Vulnerability Source VulnerableCode Version