Critical severity9.8NVD Advisory· Published Aug 16, 2017· Updated Jun 17, 2026

CVE-2017-7546

Description

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

116

PostgreSQL/PostgreSQL66 versions
cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*+ 65 more
- cpe:2.3:a:postgresql:postgresql:9.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.11:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.12:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.13:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.14:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.15:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.16:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.17:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.18:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.19:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.20:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.21:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.2.9:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.10:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.11:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.12:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.13:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.14:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.15:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.16:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.17:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.4:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.5:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.6:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.7:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.8:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.12:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.4.9:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.6:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:postgresql:postgresql:9.6.3:*:*:*:*:*:*:*
- (no CPE)range: 9.2.x before 9.2.22
Debian/linux
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
osv-coords49 versions
pkg:rpm/suse/postgresql93&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/postgresql93&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/postgresql94&distro=SUSE%20OpenStack%20Cloud%206 pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3 pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSS pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATA pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4 pkg:rpm/suse/postgresql94-libs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/postgresql96&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/postgresql96&distro=SUSE%20OpenStack%20Cloud%206 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/postgresql96-libs&distro=SUSE%20OpenStack%20Cloud%206
< 9.3.18-25.5.1+ 48 more
- (no CPE)range: < 9.3.18-25.5.1
- (no CPE)range: < 9.3.18-25.5.1
- (no CPE)range: < 9.4.13-21.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-21.5.1
- (no CPE)range: < 9.4.13-21.5.1
- (no CPE)range: < 9.4.13-21.5.1
- (no CPE)range: < 9.4.13-21.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-21.5.1
- (no CPE)range: < 9.4.13-21.5.1
- (no CPE)range: < 9.4.13-21.5.1
- (no CPE)range: < 9.4.13-21.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-0.23.5.1
- (no CPE)range: < 9.4.13-21.5.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1
- (no CPE)range: < 9.6.4-3.6.1

Patches

Vulnerability mechanics

References

www.debian.org/security/2017/dsa-3935nvdThird Party Advisory
www.debian.org/security/2017/dsa-3936nvdThird Party Advisory
www.securityfocus.com/bid/100278nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039142nvdThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2017:2677nvdThird Party Advisory
access.redhat.com/errata/RHSA-2017:2678nvdThird Party Advisory
access.redhat.com/errata/RHSA-2017:2728nvdThird Party Advisory
access.redhat.com/errata/RHSA-2017:2860nvdThird Party Advisory
security.gentoo.org/glsa/201710-06nvdThird Party Advisory
www.postgresql.org/about/news/1772/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.049
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000