GCVE - cpe:2.3:a:postgresql:postgresql:7.3.18:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:7.3.18:*:*:*:*:*:*:*

part: a version: 7.3.18 update: *

Vendor	Postgresql (`17ae1743-f0f5-50ae-b0e9-670248233cae`)
Product	Postgresql (`cce58cf9-95f4-56e0-85d7-e79aa6a78bc7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/postgresql`	purl2cpe	2026-06-01 10:12:17.004397
`pkg:deb/ubuntu/postgresql`	purl2cpe	2026-06-01 10:12:17.004398
`pkg:docker/postgres`	purl2cpe	2026-06-01 10:12:17.004399
`pkg:github/postgres/postgres`	purl2cpe	2026-06-01 10:12:17.004401
`pkg:gitlab/redhat/postgresql`	purl2cpe	2026-06-01 10:12:17.004402
`pkg:rpm/fedora/postgresql`	purl2cpe	2026-06-01 10:12:17.004403

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-6600`	vulnerable	2026-06-08 04:50:09.178083	Details available PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21 uses superuser privileges instead of table owner privileges for (1) VACUUM and (2) ANALYZE operations within index functions, and supports (3) SET ROLE and (4) SET SESSION AUTHORIZATION within index functions, which allows remote authenticated users to gain privileges. Published: 2008-01-09T21:00:00.000Z Updated: 2024-08-07T16:11:06.041Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2008:004 http://www.debian.org/security/2008/dsa-1460 http://secunia.com/advisories/28445 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10493 http://www.securityfocus.com/bid/27163	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0556`	vulnerable	2026-06-08 04:49:32.775775	Details available The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server. Published: 2007-02-06T01:00:00.000Z Updated: 2024-08-07T12:19:30.527Z Open on db.gcve.eu Reference links https://issues.rpath.com/browse/RPL-1025 http://secunia.com/advisories/24050 http://www.securityfocus.com/bid/22387 http://secunia.com/advisories/24513 http://secunia.com/advisories/24315	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.