Search CVE reports
1 – 10 of 74 results
SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ... REFRESH PUBLICATION allows a subscriber table creator to execute arbitrary SQL with the subscription's publication-side credentials. The attack takes effect...
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-17 | Not in release | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service. If SSL and GSS are both disabled, an attacker can do the same...
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-17 | Not in release | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with an...
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-17 | Not in release | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser. The attack takes effect when pg_createsubscriber next runs. Within major versions 17...
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-17 | Not in release | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-17 | Not in release | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user...
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-17 | Not in release | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types. That is to say, the victim will...
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Needs evaluation | Not in release | Not in release | — | — |
| postgresql-17 | Not in release | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Needs evaluation | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Needs evaluation | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Heap buffer overflow in PostgreSQL pg_trgm allows a database user to achieve unknown impacts via a crafted input string. The attacker has limited control over the byte patterns to be written, but we have not ruled out the...
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Vulnerable | Not in release | Not in release | — | — |
| postgresql-17 | Not in release | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Not affected | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Not affected | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Not affected | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Not affected |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Some fixes available 3 of 8
Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user...
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Vulnerable | Not in release | Not in release | — | — |
| postgresql-17 | Not in release | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Fixed | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Fixed | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |
Some fixes available 3 of 8
Heap buffer overflow in PostgreSQL pgcrypto allows a ciphertext provider to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12, 15.16, and 14.21 are affected.
8 affected packages
postgresql-18, postgresql-17, postgresql-16, postgresql-14, postgresql-12...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| postgresql-18 | Vulnerable | Not in release | Not in release | — | — |
| postgresql-17 | Not in release | Not in release | Not in release | — | — |
| postgresql-16 | Not in release | Fixed | Not in release | — | — |
| postgresql-14 | Not in release | Not in release | Fixed | — | — |
| postgresql-12 | Not in release | Not in release | Not in release | Needs evaluation | — |
| postgresql-10 | Not in release | Not in release | Not in release | — | Needs evaluation |
| postgresql-9.5 | Not in release | Not in release | Not in release | — | — |
| postgresql-9.3 | Not in release | Not in release | Not in release | — | — |