Postgresql

Postgresql

188 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2010-0442

Exploit
  • EPSS 13.36%
  • Veröffentlicht 02.02.2010 18:30:00
  • Zuletzt bearbeitet 16.06.2026 23:16:11

The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in th...

5.8

CVE-2009-4034

  • EPSS 2.13%
  • Veröffentlicht 15.12.2009 18:30:01
  • Zuletzt bearbeitet 16.06.2026 23:12:52

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 c...

6.5

CVE-2009-4136

  • EPSS 3.64%
  • Veröffentlicht 15.12.2009 18:30:01
  • Zuletzt bearbeitet 16.06.2026 23:13:06

PostgreSQL 7.4.x before 7.4.27, 8.0.x before 8.0.23, 8.1.x before 8.1.19, 8.2.x before 8.2.15, 8.3.x before 8.3.9, and 8.4.x before 8.4.2 does not properly manage session-local state during execution of an index function by a database superuser, whic...

6.8

CVE-2009-3231

  • EPSS 7.57%
  • Veröffentlicht 17.09.2009 10:30:01
  • Zuletzt bearbeitet 16.06.2026 23:11:11

The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.

4

CVE-2009-3229

  • EPSS 2.61%
  • Veröffentlicht 17.09.2009 10:30:00
  • Zuletzt bearbeitet 16.06.2026 23:11:11

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.

6.5

CVE-2009-3230

  • EPSS 2.83%
  • Veröffentlicht 17.09.2009 10:30:00
  • Zuletzt bearbeitet 16.06.2026 23:11:11

The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZAT...

4

CVE-2009-0922

Exploit
  • EPSS 10.24%
  • Veröffentlicht 17.03.2009 17:30:00
  • Zuletzt bearbeitet 16.06.2026 23:06:06

PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption and crash) by triggering a failure in the conversion of a localized error message to a client-specified enco...

6.8

CVE-2007-4769

  • EPSS 3.64%
  • Veröffentlicht 09.01.2008 21:46:00
  • Zuletzt bearbeitet 16.06.2026 22:44:45

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-boun...

4

CVE-2007-4772

Exploit
  • EPSS 3.84%
  • Veröffentlicht 09.01.2008 21:46:00
  • Zuletzt bearbeitet 16.06.2026 22:44:45

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted reg...

6.8

CVE-2007-6067

Exploit
  • EPSS 3.86%
  • Veröffentlicht 09.01.2008 21:46:00
  • Zuletzt bearbeitet 16.06.2026 22:47:21

Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of se...