Search for vulnerabilities
Vulnerability details: VCID-2puf-bcqt-aaar
Vulnerability ID VCID-2puf-bcqt-aaar
Aliases CVE-2017-7548
Summary PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-862 Missing Authorization
System Score Found at
generic_textual Medium http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-7548.html
rhas Moderate https://access.redhat.com/errata/RHSA-2017:2677
rhas Moderate https://access.redhat.com/errata/RHSA-2017:2678
cvssv3 5.4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7548.json
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00684 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00686 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00686 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00686 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00686 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00686 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00686 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00686 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00686 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00686 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00927 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00927 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00927 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.00927 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01233 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01384 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01576 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01780 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01812 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01812 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01812 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
epss 0.01812 https://api.first.org/data/v1/epss?cve=CVE-2017-7548
rhbs medium https://bugzilla.redhat.com/show_bug.cgi?id=1477187
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7546
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7547
generic_textual Medium https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7548
cvssv2 8.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 8.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2 4.0 https://nvd.nist.gov/vuln/detail/CVE-2017-7548
cvssv3 7.5 https://nvd.nist.gov/vuln/detail/CVE-2017-7548
cvssv3 7.5 https://nvd.nist.gov/vuln/detail/CVE-2017-7548
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2017-7548
archlinux High https://security.archlinux.org/AVG-381
generic_textual Medium https://ubuntu.com/security/notices/USN-3390-1
generic_textual Medium https://www.postgresql.org/about/news/1772/
cvssv3 3.1 https://www.postgresql.org/support/security/CVE-2017-7548/
Reference id Reference type URL
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-7548.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7548.json
https://api.first.org/data/v1/epss?cve=CVE-2017-7548
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7546
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7547
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7548
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://security.gentoo.org/glsa/201710-06
https://ubuntu.com/security/notices/USN-3390-1
https://www.postgresql.org/about/news/1772/
https://www.postgresql.org/about/news/postgresql-101-966-9510-9415-9320-and-9224-released-1801/
https://www.postgresql.org/support/security/CVE-2017-7548/
http://www.debian.org/security/2017/dsa-3935
http://www.debian.org/security/2017/dsa-3936
http://www.securityfocus.com/bid/100276
http://www.securitytracker.com/id/1039142
1477187 https://bugzilla.redhat.com/show_bug.cgi?id=1477187
ASA-201709-2 https://security.archlinux.org/ASA-201709-2
AVG-381 https://security.archlinux.org/AVG-381
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.10:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.10:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.12:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.12:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.8:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.4.9:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.4.9:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.5.1.:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.5.1.:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.6.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.6.1:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.6.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.6.2:*:*:*:*:*:*:*
cpe:2.3:a:postgresql:postgresql:9.6.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:postgresql:postgresql:9.6.3:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVE-2017-7548 https://nvd.nist.gov/vuln/detail/CVE-2017-7548
RHSA-2017:2677 https://access.redhat.com/errata/RHSA-2017:2677
RHSA-2017:2678 https://access.redhat.com/errata/RHSA-2017:2678
USN-3390-1 https://usn.ubuntu.com/3390-1/
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7548.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2017-7548
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2017-7548
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2017-7548
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2017-7548
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.70503
EPSS Score 0.00684
Published At May 19, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.