GCVE - cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:8.3.2:*:*:*:*:*:*:*

part: a version: 8.3.2 update: *

Vendor	Postgresql (`17ae1743-f0f5-50ae-b0e9-670248233cae`)
Product	Postgresql (`cce58cf9-95f4-56e0-85d7-e79aa6a78bc7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/postgresql`	purl2cpe	2026-06-01 10:12:17.067711
`pkg:deb/ubuntu/postgresql`	purl2cpe	2026-06-01 10:12:17.067712
`pkg:docker/postgres`	purl2cpe	2026-06-01 10:12:17.067714
`pkg:github/postgres/postgres`	purl2cpe	2026-06-01 10:12:17.067715
`pkg:gitlab/redhat/postgresql`	purl2cpe	2026-06-01 10:12:17.067716
`pkg:rpm/fedora/postgresql`	purl2cpe	2026-06-01 10:12:17.067718

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4422`	not_vulnerable	2026-06-08 05:04:36.108194	Details available SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message. Published: 2013-10-23T15:00:00.000Z Updated: 2024-08-06T16:45:13.900Z Open on db.gcve.eu Reference links http://quassel-irc.org/node/120 http://secunia.com/advisories/55194 http://secunia.com/advisories/55581 http://bugs.quassel-irc.org/issues/1244 http://seclists.org/oss-sec/2013/q4/74	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1903`	vulnerable	2026-06-08 05:03:57.160312	Details available PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors. Published: 2013-04-04T17:00:00.000Z Updated: 2024-08-06T15:20:37.266Z Open on db.gcve.eu Reference links http://www.postgresql.org/about/news/1456/ http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.postgresql.org/support/security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1902`	vulnerable	2026-06-08 05:03:57.158587	Details available PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X." Published: 2013-04-04T17:00:00.000Z Updated: 2024-08-06T15:20:36.302Z Open on db.gcve.eu Reference links http://www.postgresql.org/about/news/1456/ http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.postgresql.org/support/security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0255`	vulnerable	2026-06-08 05:03:46.523300	Details available PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read. Published: 2013-02-13T01:00:00.000Z Updated: 2024-08-06T14:18:09.608Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098586.html http://www.debian.org/security/2013/dsa-2630 http://lists.opensuse.org/opensuse-updates/2013-02/msg00060.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00059.html http://www.postgresql.org/docs/8.4/static/release-8-4-16.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3488`	vulnerable	2026-06-08 05:02:10.169786	Details available The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue. Published: 2012-10-03T21:00:00.000Z Updated: 2024-08-06T20:05:12.671Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-1263.html http://www.postgresql.org/docs/9.0/static/release-9-0-9.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:139 http://secunia.com/advisories/50636 https://bugzilla.redhat.com/show_bug.cgi?id=849172	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2655`	vulnerable	2026-06-08 05:02:05.192158	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0868`	vulnerable	2026-06-08 05:00:46.065179	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0866`	vulnerable	2026-06-08 05:00:46.034680	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4015`	vulnerable	2026-06-08 04:55:18.387875	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3433`	vulnerable	2026-06-08 04:55:14.587390	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1975`	vulnerable	2026-06-08 04:54:11.138083	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1447`	vulnerable	2026-06-08 04:54:08.166442	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1170`	vulnerable	2026-06-08 04:54:05.912506	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1169`	vulnerable	2026-06-08 04:54:05.897767	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0733`	vulnerable	2026-06-08 04:52:04.199713	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4136`	vulnerable	2026-06-08 04:51:47.232625	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4034`	vulnerable	2026-06-08 04:51:46.593236	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3230`	vulnerable	2026-06-08 04:51:32.955332	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3229`	vulnerable	2026-06-08 04:51:32.918538	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.