Approved changes feed: RSS · Atom

cpe:2.3:a:postgresql:postgresql:7.1.3:*:*:*:*:*:*:*

part: a version: 7.1.3 update: *

VendorPostgresql (17ae1743-f0f5-50ae-b0e9-670248233cae)
ProductPostgresql (cce58cf9-95f4-56e0-85d7-e79aa6a78bc7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/postgresql purl2cpe 2026-06-01 10:12:17.004220
pkg:deb/ubuntu/postgresql purl2cpe 2026-06-01 10:12:17.004221
pkg:docker/postgres purl2cpe 2026-06-01 10:12:17.004222
pkg:github/postgres/postgres purl2cpe 2026-06-01 10:12:17.004224
pkg:gitlab/redhat/postgresql purl2cpe 2026-06-01 10:12:17.004225
pkg:rpm/fedora/postgresql purl2cpe 2026-06-01 10:12:17.004226

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-0556 vulnerable 2026-06-08 04:49:32.762137 Details available
The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "previously made query plan," which allows remote authenticated users to cause a denial of service (server crash) and possibly access database content via an "ALTER COLUMN TYPE" SQL statement, which can be leveraged to read arbitrary memory from the server.
Published: 2007-02-06T01:00:00.000Z
Updated: 2024-08-07T12:19:30.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5540 vulnerable 2026-06-08 04:49:20.736406 Details available
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."
Published: 2006-10-26T17:00:00.000Z
Updated: 2024-08-07T19:55:53.447Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1402 vulnerable 2026-06-08 04:46:23.693461 Details available
Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a denial of service and possibly execute arbitrary code.
Published: 2003-01-08T05:00:00.000Z
Updated: 2024-08-08T03:26:27.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1401 vulnerable 2026-06-08 04:46:23.688032 Details available
Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow.
Published: 2003-01-08T05:00:00.000Z
Updated: 2024-08-08T03:26:27.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1400 vulnerable 2026-06-08 04:46:23.687402 Details available
Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repeat() to generate a large string.
Published: 2003-01-08T05:00:00.000Z
Updated: 2024-08-08T03:19:28.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1399 vulnerable 2026-06-08 04:46:23.686859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1398 vulnerable 2026-06-08 04:46:23.686400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1397 vulnerable 2026-06-08 04:46:23.685759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.