PostgreSQL 9.4.11
Approved changes feed: RSS · Atom
cpe:2.3:a:postgresql:postgresql:9.4.11:*:*:*:*:*:*:*
part: a version: 9.4.11 update: *
| Vendor | Postgresql (17ae1743-f0f5-50ae-b0e9-670248233cae) |
|---|---|
| Product | Postgresql (cce58cf9-95f4-56e0-85d7-e79aa6a78bc7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/postgresql |
purl2cpe | 2026-06-01 10:12:17.143960 |
pkg:deb/ubuntu/postgresql |
purl2cpe | 2026-06-01 10:12:17.143961 |
pkg:docker/postgres |
purl2cpe | 2026-06-01 10:12:17.143963 |
pkg:github/postgres/postgres |
purl2cpe | 2026-06-01 10:12:17.143964 |
pkg:gitlab/redhat/postgresql |
purl2cpe | 2026-06-01 10:12:17.143965 |
pkg:rpm/fedora/postgresql |
purl2cpe | 2026-06-01 10:12:17.143967 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7547 |
vulnerable | 2026-06-08 05:09:56.503473 |
Details available
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
Published: 2017-08-16T18:00:00.000Z
Updated: 2024-09-16T23:41:38.650Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7546 |
vulnerable | 2026-06-08 05:09:56.494129 |
Details available
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
Published: 2017-08-16T18:00:00.000Z
Updated: 2024-09-16T17:18:53.123Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7486 |
vulnerable | 2026-06-08 05:09:56.145327 |
Details available
PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
Published: 2017-05-12T19:00:00.000Z
Updated: 2024-08-05T16:04:11.547Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7485 |
vulnerable | 2026-06-08 05:09:56.079371 |
Details available
In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that the PGREQUIRESSL environment variable was no longer enforcing a SSL/TLS connection to a PostgreSQL server. An active Man-in-the-Middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client and a server.
Published: 2017-05-12T19:00:00.000Z
Updated: 2024-08-05T16:04:11.584Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7484 |
vulnerable | 2026-06-08 05:09:56.072544 |
Details available
It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pg_statistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tables they are otherwise not allowed to access.
Published: 2017-05-12T19:00:00.000Z
Updated: 2024-08-05T16:04:11.415Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15098 |
vulnerable | 2026-06-08 05:08:57.895231 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12172 |
vulnerable | 2026-06-08 05:08:45.473048 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.