GCVE - cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:7.3.4:*:*:*:*:*:*:*

part: a version: 7.3.4 update: *

Vendor	Postgresql (`17ae1743-f0f5-50ae-b0e9-670248233cae`)
Product	Postgresql (`cce58cf9-95f4-56e0-85d7-e79aa6a78bc7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/postgresql`	purl2cpe	2026-06-01 10:12:17.004444
`pkg:deb/ubuntu/postgresql`	purl2cpe	2026-06-01 10:12:17.004446
`pkg:docker/postgres`	purl2cpe	2026-06-01 10:12:17.004447
`pkg:github/postgres/postgres`	purl2cpe	2026-06-01 10:12:17.004448
`pkg:gitlab/redhat/postgresql`	purl2cpe	2026-06-01 10:12:17.004450
`pkg:rpm/fedora/postgresql`	purl2cpe	2026-06-01 10:12:17.004451

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6600`	vulnerable	2026-06-08 04:50:09.173334	Details available PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges. Published: 2008-01-09T21:00:00.000Z Updated: 2024-08-07T16:11:06.041Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2008:004 http://www.debian.org/security/2008/dsa-1460 http://secunia.com/advisories/28445 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10493 http://www.securityfocus.com/bid/27163	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6067`	vulnerable	2026-06-08 04:50:07.584662	Details available Algorithmic complexity vulnerability in the regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (memory consumption) via a crafted "complex" regular expression with doubly-nested states. Published: 2008-01-09T21:00:00.000Z Updated: 2024-08-07T15:54:26.630Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2008:004 http://www.debian.org/security/2008/dsa-1460 http://rhn.redhat.com/errata/RHSA-2013-0122.html http://www.securityfocus.com/bid/27163 https://issues.rpath.com/browse/RPL-1768	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4769`	vulnerable	2026-06-08 04:49:57.171593	Details available The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service (backend crash) via an out-of-bounds backref number. Published: 2008-01-09T21:00:00.000Z Updated: 2024-08-07T15:08:33.721Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2008:004 http://www.debian.org/security/2008/dsa-1460 http://www.securityfocus.com/bid/27163 https://issues.rpath.com/browse/RPL-1768 http://www.redhat.com/support/errata/RHSA-2008-0038.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0556`	vulnerable	2026-06-08 04:49:32.769080	Details available The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server. Published: 2007-02-06T01:00:00.000Z Updated: 2024-08-07T12:19:30.527Z Open on db.gcve.eu Reference links https://issues.rpath.com/browse/RPL-1025 http://secunia.com/advisories/24050 http://www.securityfocus.com/bid/22387 http://secunia.com/advisories/24513 http://secunia.com/advisories/24315	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5540`	vulnerable	2026-06-08 04:49:20.741879	Details available backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization." Published: 2006-10-26T17:00:00.000Z Updated: 2024-08-07T19:55:53.447Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDKSA-2006:194 http://www.ubuntu.com/usn/usn-369-2 http://securitytracker.com/id?1017115 http://projects.commandprompt.com/public/pgsql/changeset/25504 http://www.redhat.com/support/errata/RHSA-2007-0068.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2314`	vulnerable	2026-06-08 04:49:06.291055	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2313`	vulnerable	2026-06-08 04:49:06.273350	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0678`	vulnerable	2026-06-08 04:48:54.869750	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1409`	vulnerable	2026-06-08 04:48:26.563458	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0247`	vulnerable	2026-06-08 04:48:12.095942	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0244`	vulnerable	2026-06-08 04:48:12.085737	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.