VulnerableCode Package Details - pkg:generic/postgresql@9.1.23

Search for packages

Vulnerability	Summary	Fixed by
This package is not known to be affected by vulnerabilities.

Vulnerability

Summary

Fixed by

This package is not known to be affected by vulnerabilities.

Vulnerability	Summary	Aliases
VCID-44h6-ywtt-aaar	PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types.	CVE-2016-5423
VCID-8sev-sptw-aaac	PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) " (double quote), (2) \ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.	CVE-2016-5424

Vulnerability

Summary

Aliases

VCID-44h6-ywtt-aaar

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types.

CVE-2016-5423

VCID-8sev-sptw-aaac

PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the CREATEDB or CREATEROLE role to gain superuser privileges via a (1) " (double quote), (2) \ (backslash), (3) carriage return, or (4) newline character in a (a) database or (b) role name that is mishandled during an administrative operation.

CVE-2016-5424

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T07:42:21.870777+00:00	PostgreSQL Importer	Fixing	VCID-44h6-ywtt-aaar	https://www.postgresql.org/support/security/CVE-2016-5423	36.0.0
2025-03-28T07:42:21.688987+00:00	PostgreSQL Importer	Fixing	VCID-8sev-sptw-aaac	https://www.postgresql.org/support/security/CVE-2016-5424	36.0.0
2024-09-18T01:54:28.809590+00:00	PostgreSQL Importer	Fixing	VCID-44h6-ywtt-aaar	https://www.postgresql.org/support/security/CVE-2016-5423	34.0.1
2024-09-18T01:54:28.638923+00:00	PostgreSQL Importer	Fixing	VCID-8sev-sptw-aaac	https://www.postgresql.org/support/security/CVE-2016-5424	34.0.1
2024-01-03T22:22:54.303056+00:00	PostgreSQL Importer	Fixing	VCID-44h6-ywtt-aaar	https://www.postgresql.org/support/security/CVE-2016-5423	34.0.0rc1
2024-01-03T22:22:54.122812+00:00	PostgreSQL Importer	Fixing	VCID-8sev-sptw-aaac	https://www.postgresql.org/support/security/CVE-2016-5424	34.0.0rc1