rpm package
suse/postgresql94&distro=SUSE Linux Enterprise Server 12-LTSS
pkg:rpm/suse/postgresql94&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-10915 | Hig | 8.5 | < 9.4.19-21.22.7 | 9.4.19-21.22.7 | Aug 9, 2018 | A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could by | |
| CVE-2017-7548 | Hig | 7.5 | < 9.4.13-21.5.1 | 9.4.13-21.5.1 | Aug 16, 2017 | PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service. | |
| CVE-2017-7547 | Hig | 8.8 | < 9.4.13-21.5.1 | 9.4.13-21.5.1 | Aug 16, 2017 | PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so. | |
| CVE-2017-7546 | Cri | 9.8 | < 9.4.13-21.5.1 | 9.4.13-21.5.1 | Aug 16, 2017 | PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password. |
- affected < 9.4.19-21.22.7fixed 9.4.19-21.22.7
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could by
- affected < 9.4.13-21.5.1fixed 9.4.13-21.5.1
PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service.
- affected < 9.4.13-21.5.1fixed 9.4.13-21.5.1
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
- affected < 9.4.13-21.5.1fixed 9.4.13-21.5.1
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.