GCVE - cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:8.3.7:*:*:*:*:*:*:*

part: a version: 8.3.7 update: *

Vendor	Postgresql (`17ae1743-f0f5-50ae-b0e9-670248233cae`)
Product	Postgresql (`cce58cf9-95f4-56e0-85d7-e79aa6a78bc7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/postgresql`	purl2cpe	2026-06-01 10:12:17.067782
`pkg:deb/ubuntu/postgresql`	purl2cpe	2026-06-01 10:12:17.067784
`pkg:docker/postgres`	purl2cpe	2026-06-01 10:12:17.067785
`pkg:github/postgres/postgres`	purl2cpe	2026-06-01 10:12:17.067786
`pkg:gitlab/redhat/postgresql`	purl2cpe	2026-06-01 10:12:17.067788
`pkg:rpm/fedora/postgresql`	purl2cpe	2026-06-01 10:12:17.067789

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4422`	not_vulnerable	2026-06-08 05:04:36.110668	Details available SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in a message. Published: 2013-10-23T15:00:00.000Z Updated: 2024-08-06T16:45:13.900Z Open on db.gcve.eu Reference links http://quassel-irc.org/node/120 http://secunia.com/advisories/55194 http://secunia.com/advisories/55581 http://bugs.quassel-irc.org/issues/1244 http://seclists.org/oss-sec/2013/q4/74	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1903`	vulnerable	2026-06-08 05:03:57.160394	Details available PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors. Published: 2013-04-04T17:00:00.000Z Updated: 2024-08-06T15:20:37.266Z Open on db.gcve.eu Reference links http://www.postgresql.org/about/news/1456/ http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.postgresql.org/support/security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1902`	vulnerable	2026-06-08 05:03:57.158671	Details available PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X." Published: 2013-04-04T17:00:00.000Z Updated: 2024-08-06T15:20:36.302Z Open on db.gcve.eu Reference links http://www.postgresql.org/about/news/1456/ http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html http://www.postgresql.org/support/security/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-0255`	vulnerable	2026-06-08 05:03:46.526501	Details available PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enum_recv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a denial of service (server crash) or read sensitive process memory via a crafted SQL command, which triggers an array index error and an out-of-bounds read. Published: 2013-02-13T01:00:00.000Z Updated: 2024-08-06T14:18:09.608Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098586.html http://www.debian.org/security/2013/dsa-2630 http://lists.opensuse.org/opensuse-updates/2013-02/msg00060.html http://lists.opensuse.org/opensuse-updates/2013-02/msg00059.html http://www.postgresql.org/docs/8.4/static/release-8-4-16.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3488`	vulnerable	2026-06-08 05:02:10.169881	Details available The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to arbitrary external hosts by leveraging (1) stylesheet commands that are permitted by the libxslt security options or (2) an xslt_process feature, related to an XML External Entity (aka XXE) issue. Published: 2012-10-03T21:00:00.000Z Updated: 2024-08-06T20:05:12.671Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2012-1263.html http://www.postgresql.org/docs/9.0/static/release-9-0-9.html http://www.mandriva.com/security/advisories?name=MDVSA-2012:139 http://secunia.com/advisories/50636 https://bugzilla.redhat.com/show_bug.cgi?id=849172	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2655`	vulnerable	2026-06-08 05:02:05.194751	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0868`	vulnerable	2026-06-08 05:00:46.065261	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0866`	vulnerable	2026-06-08 05:00:46.037758	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4015`	vulnerable	2026-06-08 04:55:18.387957	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3433`	vulnerable	2026-06-08 04:55:14.589860	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1975`	vulnerable	2026-06-08 04:54:11.138171	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1447`	vulnerable	2026-06-08 04:54:08.166525	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1170`	vulnerable	2026-06-08 04:54:05.912590	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1169`	vulnerable	2026-06-08 04:54:05.897986	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0733`	vulnerable	2026-06-08 04:52:04.202145	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4136`	vulnerable	2026-06-08 04:51:47.232710	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4034`	vulnerable	2026-06-08 04:51:46.595746	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3230`	vulnerable	2026-06-08 04:51:32.955414	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3229`	vulnerable	2026-06-08 04:51:32.920944	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.