PostgreSQL Global Development Group PostgreSQL
9 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2015-0241 | before 9.0.19 ; 9.1.x before 9.1.15 ; 9.2.x before 9.2.10 ; … | The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allow | HIGH 8.8 | 5.5 % | ||
| CVE-2015-0242 | before 9.0.19 ; 9.1.x before 9.1.15 ; 9.2.x before 9.2.10 ; … | Stack-based buffer overflow in the *printf function implementations in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9 | HIGH 8.8 | 5.1 % | ||
| CVE-2015-0243 | before 9.0.19 ; 9.1.x before 9.1.15 ; 9.2.x before 9.2.10 ; … | Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and | HIGH 8.8 | 5.1 % | ||
| CVE-2015-0244 | before 9.0.19 ; 9.1.x before 9.1.15 ; 9.2.x before 9.2.10 ; … | PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle erro | CRITICAL 9.8 | 4.4 % | ||
| CVE-2014-8161 | before 9.0.19 ; 9.1.x before 9.1.15 ; 9.2.x before 9.2.10 ; … | PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated u | MEDIUM 4.3 | 2.5 % | ||
| CVE-2015-3166 | before 9.0.20 ; 9.1.x before 9.1.16 ; 9.2.x before 9.2.11 ; … | The snprintf implementation in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4. | CRITICAL 9.8 | 4.6 % | ||
| CVE-2015-3167 | before 9.0.20 ; 9.1.x before 9.1.16 ; 9.2.x before 9.2.11 ; … | contrib/pgcrypto in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 uses diff | HIGH 7.5 | 4.1 % | ||
| CVE-2018-10925 | 10.5 ; 9.6.10 ; 9.5.14 ; … | It was discovered that PostgreSQL versions before 10.5, 9.6.10, 9.5.14, 9.4.19, and 9.3.24 failed to properly check authorization on certain | HIGH 8.1 | 2.2 % | ||
| CVE-2018-10915 | 10.5 ; 9.6.10 ; 9.5.14 ; … | A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between co | HIGH 8.5 | 5.1 % |