GCVE - cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:8.3.1:*:*:*:*:*:*:*

part: a version: 8.3.1 update: *

Vendor	Postgresql (`17ae1743-f0f5-50ae-b0e9-670248233cae`)
Product	Postgresql (`cce58cf9-95f4-56e0-85d7-e79aa6a78bc7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/postgresql`	purl2cpe	2026-06-01 10:12:17.067623
`pkg:deb/ubuntu/postgresql`	purl2cpe	2026-06-01 10:12:17.067625
`pkg:docker/postgres`	purl2cpe	2026-06-01 10:12:17.067626
`pkg:github/postgres/postgres`	purl2cpe	2026-06-01 10:12:17.067627
`pkg:gitlab/redhat/postgresql`	purl2cpe	2026-06-01 10:12:17.067629
`pkg:rpm/fedora/postgresql`	purl2cpe	2026-06-01 10:12:17.067630

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4422`	not_vulnerable	2026-06-08 05:04:36.107650	Details available SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message. Published: 2013-10-23T15:00:00.000Z Updated: 2024-08-06T16:45:13.900Z Open on db.gcve.eu Reference links http://quassel-irc.org/node/120 http://secunia.com/advisories/55194 http://secunia.com/advisories/55581 http://bugs.quassel-irc.org/issues/1244 http://seclists.org/oss-sec/2013/q4/74	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1903`	vulnerable	2026-06-08 05:03:57.160296	Details available PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors. Published: 2013-04-04T17:00:00.000Z Updated: 2024-08-06T15:20:37.266Z Open on db.gcve.eu Reference links http://www.postgresql.org/about/news/1456/ http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.postgresql.org/support/security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1902`	vulnerable	2026-06-08 05:03:57.158571	Details available PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X." Published: 2013-04-04T17:00:00.000Z Updated: 2024-08-06T15:20:36.302Z Open on db.gcve.eu Reference links http://www.postgresql.org/about/news/1456/ http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.postgresql.org/support/security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0255`	vulnerable	2026-06-08 05:03:46.522753	Details available PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read. Published: 2013-02-13T01:00:00.000Z Updated: 2024-08-06T14:18:09.608Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098586.html http://www.debian.org/security/2013/dsa-2630 http://lists.opensuse.org/opensuse-updates/2013-02/msg00060.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00059.html http://www.postgresql.org/docs/8.4/static/release-8-4-16.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3488`	vulnerable	2026-06-08 05:02:10.169765	Details available The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue. Published: 2012-10-03T21:00:00.000Z Updated: 2024-08-06T20:05:12.671Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-1263.html http://www.postgresql.org/docs/9.0/static/release-9-0-9.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:139 http://secunia.com/advisories/50636 https://bugzilla.redhat.com/show_bug.cgi?id=849172	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2655`	vulnerable	2026-06-08 05:02:05.191569	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0868`	vulnerable	2026-06-08 05:00:46.065159	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0866`	vulnerable	2026-06-08 05:00:46.034144	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4015`	vulnerable	2026-06-08 04:55:18.387855	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3433`	vulnerable	2026-06-08 04:55:14.586871	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1975`	vulnerable	2026-06-08 04:54:11.138066	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1447`	vulnerable	2026-06-08 04:54:08.166427	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1170`	vulnerable	2026-06-08 04:54:05.912489	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1169`	vulnerable	2026-06-08 04:54:05.897747	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0733`	vulnerable	2026-06-08 04:52:04.199220	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4136`	vulnerable	2026-06-08 04:51:47.232608	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4034`	vulnerable	2026-06-08 04:51:46.592768	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3230`	vulnerable	2026-06-08 04:51:32.955315	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3229`	vulnerable	2026-06-08 04:51:32.918028	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.