PostgreSQL 9.6.3
Approved changes feed: RSS · Atom
cpe:2.3:a:postgresql:postgresql:9.6.3:*:*:*:*:*:*:*
part: a version: 9.6.3 update: *
| Vendor | Postgresql (17ae1743-f0f5-50ae-b0e9-670248233cae) |
|---|---|
| Product | Postgresql (cce58cf9-95f4-56e0-85d7-e79aa6a78bc7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/postgresql |
purl2cpe | 2026-06-01 10:12:17.217285 |
pkg:deb/ubuntu/postgresql |
purl2cpe | 2026-06-01 10:12:17.217286 |
pkg:docker/postgres |
purl2cpe | 2026-06-01 10:12:17.217288 |
pkg:github/postgres/postgres |
purl2cpe | 2026-06-01 10:12:17.217289 |
pkg:gitlab/redhat/postgresql |
purl2cpe | 2026-06-01 10:12:17.217290 |
pkg:rpm/fedora/postgresql |
purl2cpe | 2026-06-01 10:12:17.217292 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7547 |
vulnerable | 2026-06-08 05:09:56.509380 |
Details available
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
Published: 2017-08-16T18:00:00.000Z
Updated: 2024-09-16T23:41:38.650Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7546 |
vulnerable | 2026-06-08 05:09:56.501247 |
Details available
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
Published: 2017-08-16T18:00:00.000Z
Updated: 2024-09-16T17:18:53.123Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15099 |
vulnerable | 2026-06-08 05:08:57.905774 |
Details available
INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.
Published: 2017-11-22T18:00:00.000Z
Updated: 2024-09-16T16:43:27.924Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15098 |
vulnerable | 2026-06-08 05:08:57.903412 |
Details available
Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory.
Published: 2017-11-22T17:00:00.000Z
Updated: 2024-09-16T23:10:51.250Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12172 |
vulnerable | 2026-06-08 05:08:45.481490 |
Details available
PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provides a script for starting the database server during system boot. Packages of PostgreSQL for many operating systems provide their own, packager-authored startup implementations. Several implementations use a log file name that the database superuser can replace with a symbolic link. As root, they open(), chmod() and/or chown() this log file name. This often suffices for the database superuser to escalate to root privileges when root starts the server.
Published: 2017-11-22T19:00:00.000Z
Updated: 2024-09-16T22:20:22.695Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.